DevOps & Infra

vincentchuwaichow Bundle

Azure Cost Optimization Governor

vincentchuwaichow Bundle

Azure Identity Governance Review

vincentchuwaichow Bundle

Azure Observability Investigator

vincentchuwaichow Bundle

Azure Platform Automation DevOps

vincentchuwaichow Bundle

Azure Security Posture Hardening

vincentchuwaichow Bundle

Detect and coordinate response to GCP cost anomalies — BigQuery on-demand query cost spikes ($5/TB scanned), Cloud Run scaling runaway, unattached Persistent Disks, idle GCE instances, budget alert → notification channel → remediation playbook.

vincentchuwaichow Bundle

Gate Cloud KMS key version destruction and key ring deletion against a complete CMEK dependency audit. All Cloud SQL, GCS, BigQuery, Compute Engine disk, and Secret Manager resources encrypted by the key version become permanently inaccessible once destruction completes — this guard ensures no key version is destroyed without enumerating every dependent resource and obtaining explicit operator approval.

vincentchuwaichow Bundle

Traffic engineering for GCP load balancers — Global HTTPS LB, Regional HTTPS LB, TCP/SSL Proxy LB, Network LB (passthrough), Internal TCP/UDP LB — type selection, health check configuration, Cloud Armor integration, and traffic distribution.

vincentchuwaichow Bundle

Design, review, and troubleshoot VPC Service Controls perimeters, access policies, dry-run mode configuration, bridge perimeters for cross-perimeter access, and Access Context Manager access levels. Prefer gcp-iam-least-privilege-review for IAM binding review and gcp-security-posture-hardening for broad org-level security posture unless the request is primarily VPC-SC perimeter architecture or troubleshooting.

vincentchuwaichow Bundle

Build and operate Huawei CodeArts CI/CD pipelines across CodeHub (Git), Build, Deploy, TestPlan, and Pipeline modules, managing SWR image lifecycle, deployment automation, and environment promotion with rollback gates.

vincentchuwaichow Bundle

Review Terraform and RFS (Resource Formation Service) changes targeting Huawei Cloud — blast radius analysis, resource deletion detection, Organizations SCP cascade scope, cross-stack dependency impact, state file security, and rollback plan completeness.

vincentchuwaichow Bundle

Manage Huawei ModelArts training jobs (GPU and Ascend NPU cost governance), Pangu foundation model deployment, AI Gallery model management, and MLOps pipeline automation for AI/ML workloads.

vincentchuwaichow Bundle

Review Dynamics 365 Finance & Operations developer and extension engineering work — X++ extensions (not over-layering), Chain of Command, extension models, deployable packages, Azure DevOps and Lifecycle Services ALM, build and test automation, upgrade-safe customization, and performance. Detects unsafe customizations, upgrade blockers, fragile extensions, and ALM anti-patterns. Refuses to approve production deployable package deployment or schema changes without sandbox validation evidence and rollback plan. Live-guard gated for deploying packages to production and schema changes.

vincentchuwaichow Bundle

Review Power Platform application lifecycle management health across managed and unmanaged solutions, Power Platform Pipelines, environment strategy (dev/test/prod), solution layering, connection references, environment variables, source control via Git integration, and deployment gates. Use to detect unhealthy ALM patterns, missing rollback paths, and ungoverned production deployments. Static review only; production pipeline and deployment-configuration changes are escalated.

vincentchuwaichow Bundle

Use this skill to govern a migration, backfill, pipeline reprocessing, or bounded data correction against a live system: confirm data ownership sign-off, data classification, a bounded record/partition scope, a reconciliation plan, and a rollback before acting, then require reconciliation evidence and apply data-minimization/residency controls to captured evidence. It never allows an unbounded or ad-hoc production data mutation.

vincentchuwaichow Bundle

Use this skill to review how Snowflake changes ship: the official Terraform provider and its stable-versus-preview resource split, version pinning and upgrade rehearsal, plan review for destroy/replace and grant changes, state posture, Snowflake CLI in automation, CI/CD and environment promotion, drift adoption versus reversion, behaviour-change bundle management, and rollout and rollback strategy. Trigger on any Snowflake IaC, pipeline, or release question. Static review only: it never applies a change and never treats a successful plan as proof of safety.

vincentchuwaichow Bundle

Use this skill to review or design end-to-end Snowflake architecture: organization and account topology, workload placement and isolation boundaries, edition/cloud/region constraints, source-to-consumption paths, interoperability and catalog choices, and architecture decision records. Trigger when a Snowflake design decision is structural rather than operational — how many accounts, where a workload lands, which boundary is load-bearing, whether an edition upgrade is justified. Static review only: it never executes SQL and never mutates an account.

openaccountants Skill

> Integration skill for Sage 50 and Sage Business Cloud (Sage Accounting) CSV exports. Activate when the user uploads a Sage CSV, Sage transaction export, or mentions Sage 50, Sage Accounting, or Sage Business Cloud.

openclaw-commons Skill

Aws Lambda Advanced

openclaw-commons Skill

Gcp Cloud Functions

openclaw-commons Skill

Kubernetes Advanced

openclaw-commons Skill

Cloud Cost Optimizer

vincentchuwaichow Bundle

Route AWS tasks to the narrowest specialist or team of specialists from the 42-agent catalog. Use when you do not already know the specialist. Not for direct AWS answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live deployment or production-change specialist.

vincentchuwaichow Bundle

GCP Maestro routing skill. Classify the user's GCP task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. Understands GCP's global VPC model, resource hierarchy (org→folder→project), and IAM inheritance before routing any networking or identity task.

vincentchuwaichow Bundle

Route PHP-board governance tasks to the narrowest specialist or a genuinely multi-domain parallel team from the PHP catalog. Use when you do not already know which PHP specialist handles the task. Not for direct PHP answers or specialist review; Maestro classifies, dispatches, and hands off to php-board-chair-agent (or the named owning human until one exists) only. Detects and refuses live-mutation or destructive requests (deploy, database migration in prod, force-push), requiring explicit human confirmation before any such action. Treats security, supply-chain, and runtime-EOL findings as blocking hard gates that are never averaged into an approval.

vincentchuwaichow Bundle

Azure Maestro

vincentchuwaichow Bundle

Classify incoming IONOS Cloud requests and route them to the narrowest applicable specialist agent. Covers DCD topology review, security and GDPR compliance, managed Kubernetes, cost optimization, and DBaaS lifecycle operations. Use this skill when the task domain is not yet identified or spans multiple IONOS Cloud areas.

vincentchuwaichow Bundle

Huawei Cloud Maestro routing skill. Classify the user's Huawei Cloud task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. MLPS 2.0 and sovereignty-aware — flags when workloads require MLPS Level 3 controls or government cloud configurations. Understands Huawei's enterprise-project model and SCP-based org governance.

vincentchuwaichow Bundle

Alibaba Cloud Maestro routing skill. Classify the user's Alibaba Cloud task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. China-region aware — flags when workloads are in mainland China regions and applicable regulatory frameworks (MLPS 2.0, DSL, PIPL) differ from international regions.

vincentchuwaichow Bundle

Azure RBAC Review

vincentchuwaichow Bundle

Pair every cloud spend value with a kgCO2e estimate by region and service category for CSRD and SEC climate disclosure. Input is region, service category, and dollar value; output is paired kgCO2e with confidence label (vendor-published, third-party, or estimated) and source citation. Defaults to electricity-only Scope 2 market-based factors.

vincentchuwaichow Bundle

Route and classify Hetzner Cloud tasks to the narrowest qualified specialist — cost optimization, infrastructure review, capacity planning, firewall guard, or server lifecycle guard. Use when the user's Hetzner request spans multiple domains or needs triage before specialist engagement.

vincentchuwaichow Bundle

Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.

vincentchuwaichow Bundle

Azure Role Selector

vincentchuwaichow Bundle

Design and review GCP network architecture including global VPC topology, Shared VPC patterns, Cloud Interconnect/VPN hybrid connectivity, Cloud NAT, DNS, Cloud Armor, and Traffic Director service mesh.

vincentchuwaichow Bundle

Design Cloud Spanner schemas with hotspot avoidance, interleaving strategies, optimal indexing, processing-unit sizing, and global write patterns for distributed OLTP at scale.