How we work: AI skills - Easy Cyber Protection Skip to main content<br>← About How we work: AI skills<br>Solo founder + AI + CyFun consultants + advisors.
TL;DR<br>Easy Cyber Protection is the CyFun-native compliance platform for MSPs delivering NIS2 audit-readiness to Belgian SMEs. White-label, local-first, built for the channel SMEs already trust.<br>This article should give you an idea of how we build, maintain and service that platform. And our customers.<br>The AI agent stack runs on standard operating procedures we call "skills": written rules, constraints and examples that tell the AI how each kind of work gets done.<br>Currently 35 skills (~183,000 words), plus 70+ internal docs (~88,000 words) and 80+ planning files (~103,000 words) the agents read for context.<br>Behind it: one founder (20+ years IT, a decade of production SaaS), external CyFun consultants, and advisors.<br>Below: 9 sample skills out of those 35, with their real output. Theory after the examples.
Cartoon — subject in, editorial cartoon out<br>Input is one line: a subject and a tone.<br>The skill derives the rest: a three-panel scenario, which of the two recurring characters (versioned character sheets for Fred and Wilma, currently v5) appear, the punchline, three image-edit API calls with different seeds, and the winner for my human pick.<br>Under the hood: ~5,800 words of prompt and workflow instructions, four publicly visible example outputs, and a separate image skill that this skill calls for the actual rendering.<br>What you see below this block is not AI-generated without review. It came out of this pipeline and was approved by the human (me).<br>Exhibit: character sheets
The character sheets for Fred and Wilma (v5). Six rotation views plus a front-facing pose, fed to the image-edit API so the characters stay consistent across hundreds of cartoons.<br>Exhibit: humour rule (excerpt from SKILL.md)<br>The humor must be completely self-explanatory: no names,<br>no context needed, no backstory. A stranger seeing this<br>for the first time should immediately get it and smile.
Neither character is "right" or "wrong" — they're just two<br>people who know each other's quirks inside out.
This backstory is for YOUR reference only — it informs<br>the humor but NEVER appears in captions. Captions must<br>work for anyone, regardless of whether they know the<br>characters. An excerpt from the skill spec — the rule that drives the humour. Not a recipe, just the frame:<br>Exhibit: sample output
A handful of cartoons generated through the cartoon skill. Each starts from a subject; the skill derives scenario, characters, panels and caption; I pick the version that lands. Minutes from idea to approved output.
Strategic advisor — 50+ frameworks, one verdict<br>The biggest skill in the stack: nearly 100,000 words of instruction spread across 69 files.<br>Frameworks from Ray Dalio (radical truth), Elon Musk's five-step elimination algorithm, John Boyd's OODA loop, Jeff Bezos' one-way-door tests, and dozens more.<br>The skill picks the three-to-five frameworks most relevant to the decision, runs each independently, and synthesises the tension between their verdicts.<br>The February 2026 MSP pivot, the pricing rebalance, the no-ChatGPT stack choice: each ran through this loop before commitment.<br>Exhibit: framework library breakdown<br>DomainFrameworks market-gtm14strategic-analysis14thinking-quality10decision-making9execution8systems4financial4creativity1 Total64<br>64 named frameworks across 8 domains. The skill picks 3-5 most relevant to the question, runs each independently, and surfaces the tension between verdicts. ~100,000 words of instruction back the picker.
Search-visibility (SEO/GEO) — disciplined visibility<br>11,000+ words across 8 documents, plus a weekly-updated tactics ledger that flags saturated plays (llms.txt, word-count chasing, mass AI-blog publishing) so the skill stops recommending them.<br>The approach: an intent-cluster model (not a funnel) mapped onto how Belgian MSP buyers actually search.<br>Cross-checked against primary Google sources, not vendor blog posts.<br>When Ahrefs published a controlled study breaking the "schema = +3.2x citations" claim, the entire schema positioning was demoted to "hygiene, not driver" within 24 hours.<br>Exhibit: tactics-ledger entry (real)<br>### llms.txt file at site root<br>- First seen: 2026-05-18<br>- Mentions: ubiquitous<br>- Sources: SE Ranking study; Mintlify analysis<br>- Status: Saturated (ship-and-forget; no measured lift)<br>- What it claims: Citation lift from LLMs.<br>- Why it matters for ECP: Already shipped because<br>it's cheap. Don't claim it as a driver.<br>- Verdict: Ignore as a lever. Every tactic the broader SEO/GEO discourse pushes gets classified here. Saturated = don't lead with it. Contradicted = investigate. The ledger is what stops the skill from chasing whatever Reddit said last week.
CyFun framework engine — Excel in, audit pack out<br>The CCB's official CyberFundamentals workbook is an Excel with hundreds of controls split across four tiers.<br>This skill parses it, maps each control...