A scan tells you what is wrong. This tells you what to do. Same engine as the ADA Website Risk Scanner — 14 WCAG 2.2 AA check families. But instead of a defect list, you get a work plan: findings grouped into batches, ordered by exposure reduced per hour of developer time, each with before/after code, effort estimate, required skill, and a verification step. Three phases. Quick wins first. A project manager can assign it as-is.
Turn "how long can we survive?" anxiety into a board-ready funding-decision plan. Get current cash, net burn, burn multiple, and cash-out date — then base / upside / downside cases, 12 / 9 / 6-month triggers, cost levers, hiring and spend gates, and fundraising timing. Built so you don't rely on a single runway number, freeze hiring too late, mistime the raise, or leave downside actions without an owner.
Stop letting your biggest calls get trapped in binary framing, gut instinct, or FOMO — only to realize six months later that the decision structure itself was the failure. This produces a reviewable strategic decision journal: type-1/type-2 reversibility classification, 3+ options instead of yes/no, a cost-risk-time matrix, a pre-mortem of the top 5 failure modes, a stakeholder disagreement map, your confidence level, explicit kill criteria, and a 30/60/90-day review.
Turn a messy week of tasks, commitments, and firefighting into a 30-60 minute executable weekly operating review. Inspect real velocity, clear your inbox and open commitments, rank work with RICE and Value-vs-Effort, then lock next week's Top 3, success metrics, a daily micro-plan, and an explicit backlog of what you won't do. Built to stop you listing 30 tasks and advancing none, losing progress visibility, or hitting Sunday-night anxiety with no decision rhythm.
This Skill encodes the current 2026 CSRD/ESRS framework - post-Omnibus scope and thresholds, the ESRS simplification, the 12 standards (ESRS 2 + E1-E5, S1-S4, G1) and the full double materiality method - as a structured workflow. It runs scoping, a double materiality assessment, disclosure mapping, gap analysis, and drafts the sustainability statement. It never invents data and flags where auditor limited assurance is required.
Run authorized penetration tests / vulnerability assessments end to end: Rules of Engagement (authorization & scope) → recon/enumeration → OWASP Top 10 review → CVSS triage → concrete remediation → a formal assessment report for executives and engineers. Defense-focused: it centers authorization management, systematic enumeration, risk evaluation, and a client-actionable deliverable — not offensive payloads. Authorized targets only; no DoS, destruction, or evasion.
Challenge your thinking before you commit. The riskiest decisions are the ones that feel obvious too early. Council runs your plan past independent advisers who surface objections and hidden risks — before you commit.