← all publishers

VincentChuWaiChow

@vincentchuwaichow source repo

Report this profile Claim this profile

• 760 skills
• 0 followers
• 1 day ago last updated

1. ▌
   AWS Agentcore · vincentchuwaichow bundle

   Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, Evaluations, Registry, Payments, policy, and harness-vs-code-path decisions. Load references only when that component is needed.
   0 installs
2. ▌
   Java Maestro · vincentchuwaichow bundle

   Java Maestro routing skill. Classify the user's Java/JVM task, select the narrowest static-review specialist from the Java board (or the smallest team, max 4), and dispatch. Trigger when a user brings a Java, JVM, Spring, Jakarta EE, JDK-upgrade, JPA/Hibernate, or Java-security task and it is not yet clear which specialist should handle it. Routes only — never answers Java questions itself, never runs code, never requests secrets.
   0 installs
3. ▌
   Pr Babysit · vincentchuwaichow

   The repeatable loop for watching a pull request until it is merged or closed, pairing webhook subscription with a scheduled self check-in so CI results, new pushes, and merge-conflict transitions are never missed; use when asked to watch, babysit, or autofix a PR, or right after creating one.
   0 installs
4. ▌
   Azure Maestro · vincentchuwaichow bundle

   Azure Maestro
   0 installs
5. ▌
   Ionos Maestro · vincentchuwaichow bundle

   Classify incoming IONOS Cloud requests and route them to the narrowest applicable specialist agent. Covers DCD topology review, security and GDPR compliance, managed Kubernetes, cost optimization, and DBaaS lifecycle operations. Use this skill when the task domain is not yet identified or spans multiple IONOS Cloud areas.
   0 installs
6. ▌
   Dotnet Maestro · vincentchuwaichow bundle

   .NET Maestro routing skill. Classify the user's .NET task, select the narrowest specialist agent or the right team of specialists from the .NET board, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Trigger when a user brings a .NET, C#, ASP.NET Core, EF Core, NuGet, .NET Aspire, or .NET performance/observability task and it is not yet clear which specialist should handle it. Routes only — never answers .NET questions itself, never runs code, never requests secrets.
   0 installs
7. ▌
   Finops Maestro · vincentchuwaichow bundle

   Route FinOps tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know the specialist. Not for direct FinOps answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live mutation specialist.
   0 installs
8. ▌
   Huawei Maestro · vincentchuwaichow bundle

   Huawei Cloud Maestro routing skill. Classify the user's Huawei Cloud task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. MLPS 2.0 and sovereignty-aware — flags when workloads require MLPS Level 3 controls or government cloud configurations. Understands Huawei's enterprise-project model and SCP-based org governance.
   0 installs
9. ▌
   Kotlin Maestro · vincentchuwaichow bundle

   Use this skill to classify a Kotlin, JVM-Kotlin, Android, or Kotlin Multiplatform task and route it to the narrowest static-review specialist on the Kotlin board, or to gate a production-mutation request to a named human owner. Routing and classification only — it never reviews Kotlin work itself, never answers a Kotlin question directly, and never contacts a live system.
   0 installs
10. ▌
    Nvidia Maestro · vincentchuwaichow bundle

    Route NVIDIA tasks to the narrowest specialist or team of specialists from the NVIDIA agent catalog. Use when you do not already know the specialist. Not for direct NVIDIA answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches the live-runtime promotion gatekeeper — requires explicit human confirmation with blast-radius and rollback before routing to any runtime-evidence specialist.
    0 installs
11. ▌
    Python Maestro · vincentchuwaichow bundle

    Use this skill to classify a Python application, runtime, packaging, framework, data, or code-level task and route it to the narrowest static-review specialist on the Python board, or to gate a production-mutation request to a named human owner. Routing and classification only — it never reviews Python work itself, never answers a Python question directly, and never contacts a live system.
    0 installs
12. ▌
    D365 Maestro · vincentchuwaichow bundle

    Route Dynamics 365 tasks to the narrowest D365 specialist from the catalog. Use when you do not already know the specialist. Not for direct D365 answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Enforces Success by Design gates and segregation-of-duties escalation. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any D365 production cutover, data migration to prod, or posting-config agent.
    0 installs
13. ▌
    M365 Maestro · vincentchuwaichow bundle

    Route Microsoft 365 tasks to the narrowest M365 specialist from the catalog. Use when you do not already know the specialist. Not for direct M365 answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any agent that changes live tenant configuration.
    0 installs
14. ▌
    Alibaba Maestro · vincentchuwaichow bundle

    Alibaba Cloud Maestro routing skill. Classify the user's Alibaba Cloud task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. China-region aware — flags when workloads are in mainland China regions and applicable regulatory frameworks (MLPS 2.0, DSL, PIPL) differ from international regions.
    0 installs
15. ▌
    Azure Rbac Review · vincentchuwaichow bundle

    Azure RBAC Review
    0 installs
16. ▌
    Contabo Maestro · vincentchuwaichow bundle

    Router skill for classifying Contabo tasks and delegating to the narrowest specialist for cost analysis, capacity planning, security hardening, VPS/VDS lifecycle operations, or Object Storage management. Use when the user asks a Contabo question that spans multiple domains or needs triage before specialist engagement.
    0 installs
17. ▌
    Finance Maestro · vincentchuwaichow bundle

    Route corporate finance questions to the narrowest specialist in the catalog. Use when you do not already know the specialist needed. Not for direct finance answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 3) for multi-domain tasks. Never auto-dispatches any write-capable agent — requires explicit human confirmation before routing to any agent with planning system or ERP write access.
    0 installs
18. ▌
    Carbon Cost Pair · vincentchuwaichow bundle

    Pair every cloud spend value with a kgCO2e estimate by region and service category for CSRD and SEC climate disclosure. Input is region, service category, and dollar value; output is paired kgCO2e with confidence label (vendor-published, third-party, or estimated) and source citation. Defaults to electricity-only Scope 2 market-based factors.
    0 installs
19. ▌
    Hetzner Maestro · vincentchuwaichow bundle

    Route and classify Hetzner Cloud tasks to the narrowest qualified specialist — cost optimization, infrastructure review, capacity planning, firewall guard, or server lifecycle guard. Use when the user's Hetzner request spans multiple domains or needs triage before specialist engagement.
    0 installs
20. ▌
    D365 Commerce · vincentchuwaichow bundle

    Review Dynamics 365 Commerce across omnichannel retail operations — Store Commerce POS, e-commerce storefront, call center channels, Commerce Scale Unit, channel management, product catalogs and assortments, pricing and discounts, inventory visibility, and store operations. Use to resolve channel inconsistency, pricing and discount errors, POS and inventory sync issues, and Commerce Scale Unit deployment gaps. Static review only; production channel and pricing configuration changes are escalated.
    0 installs
21. ▌
    Hr Risk Triage Review · vincentchuwaichow bundle

    Use this skill when triaging HR and employment-relations risk for an enterprise People function — terminations, discipline, performance management, accommodations, leave, wage/hour, worker classification, discrimination, harassment, retaliation, whistleblower reports, layoffs, and HR policy exceptions. Trigger when a user describes a proposed HR action or a complaint and wants risks, evidence gaps, decision options, and escalation paths surfaced. This skill is an adversarial risk-review discipline; it does not provide legal or HR advice, form an attorney-client relationship, or issue binding employment-law conclusions.
    0 installs
22. ▌
    Test Flakiness Triage · vincentchuwaichow bundle

    Use this skill when triaging flaky tests across any test framework — analyzing a flaky-test report, CI rerun history, or a set of intermittently failing tests to assign each a root-cause category and a remediation or quarantine path. Trigger when a user reports tests that pass on re-run, asks why CI is unreliable, provides a flaky-test dashboard export, or wants a quarantine policy. This skill reviews evidence statically; it does not execute or re-run tests.
    0 installs
23. ▌
    AWS Network Architect · vincentchuwaichow bundle

    Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.
    0 installs
24. ▌
    Azure Role Selector · vincentchuwaichow bundle

    Azure Role Selector
    0 installs
25. ▌
    Frontend Maestro · vincentchuwaichow bundle

    Route frontend governance tasks to the narrowest specialist or parallel team (max 4) from the frontend agent catalog. Use when you do not already know which frontend specialist handles the task. Not for direct frontend answers; Maestro classifies, dispatches, and hands off to frontend-board-chair-agent only. Never auto-dispatches live-mutation-capable specialists — requires explicit human confirmation with blast-radius and rollback before routing to any live-guard specialist.
    0 installs
26. ▌
    GCP Network Architect · vincentchuwaichow bundle

    Design and review GCP network architecture including global VPC topology, Shared VPC patterns, Cloud Interconnect/VPN hybrid connectivity, Cloud NAT, DNS, Cloud Armor, and Traffic Director service mesh.
    0 installs
27. ▌
    GCP Spanner Architect · vincentchuwaichow bundle

    Design Cloud Spanner schemas with hotspot avoidance, interleaving strategies, optimal indexing, processing-unit sizing, and global write patterns for distributed OLTP at scale.
    0 installs
28. ▌
    Java Spring Security · vincentchuwaichow bundle

    Use this skill when statically reviewing a Spring Security 6 service's authorization and endpoint-exposure posture — multiple SecurityFilterChain beans and securityMatcher disjointness/ordering, authorizeHttpRequests matcher sequencing (first-match-wins, permitAll before authenticated, anyRequest() last), request-level vs @PreAuthorize/@PostAuthorize/@Secured method-security precedence, AuthorizationManager delegation and fail-closed behavior, CSRF on state-changing endpoints, and Spring Boot Actuator exposure (management.endpoints.web.exposure.include, EndpointRequest, securing /actuator). Trigger when a user provides Spring Security configuration (HttpSecurity/SecurityFilterChain beans, method-security annotations, actuator properties) or asks whether an endpoint or actuator surface is safely secured. Reads source and sanitized configuration only; it never builds, runs, or contacts a live system.
    0 installs
29. ▌
    Oci Network Architect · vincentchuwaichow bundle

    OCI Network Architect
    0 installs
30. ▌
    Ovhcloud Maestro · vincentchuwaichow bundle

    Classify incoming OVHcloud requests by domain and route to the narrowest qualified specialist agent. Use when the user's task spans or is unclear across IAM, FinOps, Kubernetes, networking, or live-guard KMS domains. Does not answer specialist questions directly; produces a routing verdict with evidence and hands off with a clear scope statement.
    0 installs
31. ▌
    Scaleway Maestro · vincentchuwaichow bundle

    Classify and route Scaleway tasks to the narrowest qualified specialist agent. Use when a user presents a Scaleway request that spans IAM, cost, Kapsule/Kubernetes, networking, or live-guard domains, and the correct specialist is not yet identified. Produces a domain verdict, recommended specialist, and routing rationale without answering specialist questions directly.
    0 installs
32. ▌
    Agentic Delegation · vincentchuwaichow

    Delegate exploration sweeps to Haiku subagents and bulk writing to Sonnet subagents while the orchestrator keeps architecture, security-sensitive edits, and commits; use at the start of any multi-step task in this repo to minimize token spend by delegating to cheaper models.
    0 installs
33. ▌
    Definition Of Done · vincentchuwaichow

    The ordered finish-line runner for any change in this repo — generators, then the asset-integrity refresh last on its own, then the full gate suite, then commit and push; use before declaring any change finished or whenever the stop hook reports uncommitted or untracked changes.
    0 installs
34. ▌
    Payroll Advisor · vincentchuwaichow bundle

    Multi-jurisdiction payroll accounting reference framework covering compensation expense recognition, employee benefits, pension/post-retirement obligations, and payroll tax compliance.
    0 installs
35. ▌
    AWS Iac Patch Executor · vincentchuwaichow bundle

    Edit AWS IaC files including CloudFormation, SAM, CDK config, and Terraform to patch defects, prepare change set review, or unblock rollout work. Prefer this for bounded repo changes only; do not use for apply, deploy, or destructive infrastructure execution.
    0 installs
36. ▌
    AWS Solution Architect · vincentchuwaichow bundle

    Design and stress-test AWS cross-domain solution architectures when the request spans multiple AWS domains or needs an architecture decision record. Prefer narrower AWS skills for single-domain IAM, network, EKS, ECS, serverless, RDS, DynamoDB, S3, Bedrock, IaC, cost, security, migration, compliance, or incident asks.
    0 installs
37. ▌
    GCP Cloud Auth Advisor · vincentchuwaichow bundle

    Advise on Google Cloud authentication and authorization patterns — covering Application Default Credentials (ADC), service account best practices, Workload Identity Federation (for GKE pods and external workloads), human user auth (gcloud, IAP, Identity Platform), service-to-service auth (OIDC ID tokens, short-lived credentials), and anti-patterns like service account key downloads. Use when designing auth flows, debugging GCP auth failures, implementing least-privilege SA setup, or migrating from SA keys to keyless authentication.
    0 installs
38. ▌
    GCP Firebase Developer · vincentchuwaichow bundle

    Build, configure, and operate Firebase-powered web and mobile applications — covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building mobile/web apps with Firebase, setting up authentication flows, designing Firestore data models, deploying Firebase Hosting, or configuring Firebase security rules.
    0 installs
39. ▌
    GCP Solution Architect · vincentchuwaichow bundle

    Design GCP solutions aligned with the Google Cloud Architecture Framework when the request spans resource hierarchy, product selection, or multi-service architecture decisions. Prefer narrower GCP skills for single-domain network, GKE, Cloud Run, data pipeline, database, or landing zone asks.
    0 installs
40. ▌
    Oci Solution Architect · vincentchuwaichow bundle

    OCI Solution Architect
    0 installs
41. ▌
    CI Test Pipeline Review · vincentchuwaichow bundle

    Use this skill when reviewing how a CI pipeline runs tests — gating, sharding, parallelism, fail-fast behavior, artifact retention, and flaky-test quarantine wiring. Trigger when a user provides a CI workflow file (GitHub Actions, GitLab CI, CircleCI, Jenkins), asks why CI is slow or unreliable as a merge gate, or wants to know whether their test pipeline actually blocks bad merges. This skill reviews CI configuration statically; it does not trigger or run pipelines.
    0 installs
42. ▌
    Argocd Gitops Review · vincentchuwaichow bundle

    Use this skill for Argo CD GitOps review across Application, AppProject, ApplicationSet, sync windows, RBAC, sync impersonation, and Argo CD Agent multi-cluster topologies. Trigger when the user asks whether an Argo CD configuration is safe for production, whether automated sync should be enabled, whether prune+selfHeal is appropriate, whether AppProject scope is too wide, or how to enforce least-privilege sync identity.
    0 installs
43. ▌
    AWS Waf Security Review · vincentchuwaichow bundle

    Review AWS workloads against the Well-Architected Framework Security Pillar: identity foundations, detective controls, infrastructure protection, data protection, and incident response readiness.
    0 installs
44. ▌
    Databricks Mlops · vincentchuwaichow bundle

    Use this skill to review machine-learning model lifecycle on Databricks: MLflow 3 with Unity Catalog as default registry, alias-based promotion and champion/challenger patterns, feature-store design with point-in-time correctness, Model Serving endpoint configuration and traffic management, inference-table auto-logging with at-least-once guarantees, batch inference with `ai_query()`, and cross-environment promotion paths. Establishes evidence linking tests to production deployments without executing inference.
    0 installs
45. ▌
    GCP Cost Finops Analyst · vincentchuwaichow bundle

    Analyze GCP spend via Billing exports, optimize committed-use and sustained-use discounts, design cost attribution (labels/tags), investigate budget alert drift, and recommend rightsizing for Compute, GKE, and BigQuery. Prefer gcp-bigquery-cost-performance-analyst for deep BigQuery query and slot optimization unless the request is primarily billing export analysis, CUD/SUD coverage, or cross-service cost attribution.
    0 installs
46. ▌
    GCP Waf Security Review · vincentchuwaichow bundle

    Evaluate GCP workload security posture against the Google Cloud Well-Architected Framework security pillar — covering zero trust, shift-left security, preemptive cyber defense, AI security governance, and regulatory compliance. Use when assessing architecture security requirements, designing security controls, or auditing a GCP workload against WAF security recommendations.
    0 installs
47. ▌
    Java Kafka Reliability · vincentchuwaichow bundle

    Use this skill when statically reviewing a Kafka producer/consumer pipeline for whether it actually delivers the delivery semantics it claims — idempotent-producer-vs-exactly-once conflation, transactional read-process-write wiring (transactional.id, initTransactions, sendOffsetsToTransaction, consumer isolation.level=read_committed), at-least-once with or without an idempotent consumer, commit-before-process message loss, ordering (max.in.flight.requests.per.connection combined with idempotence), consumer lag as the operational SLA signal, max.poll.interval.ms rebalance stalls, DLQ/retry-topic design, and acks=all plus min.insync.replicas durability. Trigger when a user provides producer/consumer configuration, Kafka client or Spring @KafkaListener code, or a topic/partition design and asks whether messages can be lost, duplicated, reordered, or stuck, or whether an "exactly-once" claim actually holds. Reads source and sanitized configuration only; it never opens a broker connection, produces or consumes a l
    0 installs
48. ▌
    Java Test Architecture · vincentchuwaichow bundle

    java-test-architecture
    0 installs
49. ▌
    Marketing Maestro · vincentchuwaichow bundle

    Route marketing-governance review tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know which marketing-governance specialist you need. Not for direct answers; Maestro classifies, dispatches, and synthesizes only. Dispatches a single agent for focused tasks or a parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard or mutating agents — requires explicit human confirmation with blast-radius and rollback before any live mutation.
    0 installs
50. ▌
    Microsoft Maestro · vincentchuwaichow bundle

    Route Microsoft SaaS tasks to the right sub-maestro (m365-maestro-agent, d365-maestro-agent, power-platform-maestro-agent, copilot-governance-maestro-agent) or directly to a specialist. Use when you do not already know the specialist. Not for direct Microsoft answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single sub-maestro or agent for focused tasks, parallel team (max 4) for multi-domain tasks. Refuses Azure IaaS and infrastructure tasks and deflects to azure-maestro. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live-tenant-mutation agent.
    0 installs
51. ▌
    Oci Cost Finops Analyst · vincentchuwaichow bundle

    OCI Cost FinOps Analyst
    0 installs
52. ▌
    Oci Dbtools SQL Analyst · vincentchuwaichow bundle

    OCI Database Tools SQL Analyst
    0 installs
53. ▌
    Oci Waf Security Review · vincentchuwaichow bundle

    OCI WAF Security Review
    0 installs
54. ▌
    Sap Fiori Ui5 UX Review · vincentchuwaichow bundle

    Review SAP Fiori and SAPUI5 applications for Fiori design guidelines adherence, UI5 app structure and MVC correctness, OData consumption patterns, performance, accessibility, and Fiori launchpad integration. Use when assessing Fiori app code, manifest.json, XML views, controllers, OData model binding, or launchpad tile configuration for quality, compliance with SAP UX standards, and readiness for productive use. Does not touch live systems.
    0 installs
55. ▌
    Snowflake Maestro · vincentchuwaichow bundle

    Use this skill to classify a Snowflake task and route it to the narrowest review specialist on the Snowflake board, or to gate a mutation request behind explicit written human approval. Trigger when a Snowflake architecture, administration, identity, network, governance, compliance, FinOps, query performance, pipeline, streaming, analytics, ML, Cortex AI, Native App, BCDR, DevOps/IaC, migration, or business-value task arrives and the right specialist is not yet obvious. Routing only: it never answers a Snowflake question itself, never executes SQL, and never auto-dispatches a live guard.
    0 installs
56. ▌
    Terraform Maestro · vincentchuwaichow bundle

    Route a Terraform or OpenTofu task to the right advisory specialist on the IaC board. Use when the specific specialist is not already known. Not for direct IaC answers — this skill classifies, dispatches, and synthesizes only. Applies documented thresholds so a change is not sprayed across four agents when one owns it, and stops for written human confirmation before any live apply, destroy, or state mutation is handed to a cloud live-guard agent.
    0 installs
57. ▌
    Focus Spec Normalizer · vincentchuwaichow bundle

    Normalize vendor-specific billing rows (AWS CUR, Azure Cost Management, GCP Billing Export, OCI) into FOCUS v1.2 columns from user-pasted CSV or JSON input. Refuses to invent column values not derivable from the input. No credentials accepted; operates on user-supplied data only.
    0 installs
58. ▌
    GCP Alloydb AI Developer · vincentchuwaichow bundle

    Design and build AI-powered applications on AlloyDB for PostgreSQL using AlloyDB AI — covering vector search, hybrid search (vector + full-text), AI SQL functions (ai_generate, ai_classify, ai_score, ai_embed), model endpoint management, and the AlloyDB Omni edge runtime. Prefer gcp-alloydb-cloudsql-dba for cluster operations, backup, HA, and DBA tasks; use this skill when the request is primarily about AlloyDB AI search, SQL AI functions, or embedding pipelines.
    0 installs
59. ▌
    GCP Alloydb Cloudsql Dba · vincentchuwaichow bundle

    Operate AlloyDB clusters and Cloud SQL instances — HA configuration, read replicas, connection pooling, maintenance windows, backup strategy, and performance diagnostics.
    0 installs
60. ▌
    GCP Gemini API Developer · vincentchuwaichow bundle

    Build, integrate, and debug Gemini API applications on Google Cloud Agent Platform (formerly Vertex AI) using the unified google-genai SDK. Covers text generation, multimodal inputs, function calling, structured output, embeddings, context caching, batch prediction, streaming, Live API (bidirectional voice/video), and model tuning across Python, TypeScript/JavaScript, Go, Java, and C#. Use when building Gemini-powered applications, migrating from deprecated Vertex AI or google-generativeai SDKs, or integrating Gemini capabilities into a GCP-hosted service.
    0 installs
61. ▌
    Java Resilience Pattern · vincentchuwaichow bundle

    java-resilience-pattern
    0 installs
62. ▌
    Helm Chart Quality Review · vincentchuwaichow bundle

    Use this skill when a user provides a Helm chart or asks to review Helm chart quality, security, or testability — including Chart.yaml, values.yaml, templates/, tests/, or chart-testing CI configuration.
    0 installs
63. ▌
    Sap Order To Cash Review · vincentchuwaichow bundle

    SAP Order-to-Cash Review
    0 installs
64. ▌
    Accounting Maestro · vincentchuwaichow bundle

    Route accounting questions to the narrowest specialist in the catalog. Use when you do not already know the specialist needed. Not for direct accounting answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 3) for multi-domain tasks. Never auto-dispatches any write-capable agent — requires explicit human confirmation before routing to any agent with ledger or ERP write access.
    0 installs
65. ▌
    AWS Change Impact Advisor · vincentchuwaichow bundle

    Assess AWS change impact using change sets, deployment blast radius, rollback readiness, dependency mapping, risk, go/no-go context, approval context, and stakeholder communication. Prefer this for non-destructive pre-change advisory work; prefer IaC or platform-specific skills for deep implementation review.
    0 installs
66. ▌
    AWS Eks Platform Operator · vincentchuwaichow bundle

    Review Amazon EKS Kubernetes platform operations across cluster access, IRSA, IAM roles for service accounts, pod identity, node groups, Karpenter, autoscaling, CNI/network policy, upgrades, reliability, observability, and cost. Use only for EKS/Kubernetes; prefer ECS/Fargate operator for ECS services.
    0 installs
67. ▌
    AWS Landing Zone Governor · vincentchuwaichow bundle

    Review and design AWS landing zones, AWS Control Tower environments, Organizations structures, OUs, account vending patterns, guardrails, central logging, security/audit accounts, and multi-account governance. Use when the user asks how to structure AWS accounts or govern a cloud estate.
    0 installs
68. ▌
    AWS Live Iac Change Guard · vincentchuwaichow bundle

    Guard live CloudFormation, SAM, CDK, and Terraform-backed AWS infrastructure changes with change set, drift, stack policy, rollback trigger, approval, and execute gates. Use only for intentional live IaC execution with confirmed targets.
    0 installs
69. ▌
    AWS Pipeline Fix Operator · vincentchuwaichow bundle

    Repair AWS pipeline configuration, buildspecs, workflow files, deployment steps, artifact wiring, release guardrails, and CodeDeploy integration in-repo. Use for non-destructive CI/CD corrections; do not trigger live pipeline runs or mutate cloud state.
    0 installs
70. ▌
    Databricks Maestro · vincentchuwaichow bundle

    Use this skill to classify an incoming Databricks task and route it to the narrowest owning specialist on the Databricks board. Classifies on intent, business context, artifact type, blast radius, required evidence, implied runtime authority, and specialist ownership; emits a single owner, a parallel team of up to four with the conflict named, an unclassified request for the smallest sufficient artifact, or a live-guard gate. Routing only — it never reviews Databricks work and never dispatches a mutation.
    0 installs
71. ▌
    Frontend Board Chair · vincentchuwaichow bundle

    Sequence frontend specialist and red-team reviews for the 10 governed workflows (new feature, perf regression, a11y audit, security review, SSR/hydration bug, design-system change, framework migration, AI-generated code review, production incident, CWV failure) and issue a binding evidence-gated approve/conditional-approve/reject decision. Use when a frontend change needs a final governance verdict, not a first-pass technical review.
    0 installs
72. ▌
    GCP Change Impact Advisor · vincentchuwaichow bundle

    Pre-change blast radius analysis for GCP — cross-project resource dependency mapping, org policy cascade effects, Shared VPC peering impact, Service Account impersonation chain analysis, and safe change sequencing.
    0 installs
73. ▌
    GCP Gke Platform Operator · vincentchuwaichow bundle

    Operate GKE clusters (Standard and Autopilot), manage node pools, configure Workload Identity, enforce Binary Authorization, plan node pool upgrades, and review cluster security posture.
    0 installs
74. ▌
    Huawei Gaussdb Rds Dba · vincentchuwaichow bundle

    Manage Huawei GaussDB (MySQL, PostgreSQL, Oracle-compatible), RDS instances, DDS (Document Database Service, MongoDB-compatible), database proxy connection pooling, and HA/backup architecture with CBR integration.
    0 installs
75. ▌
    Kubernetes Maestro · vincentchuwaichow bundle

    Route Kubernetes tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know the specialist. Not for direct Kubernetes answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live mutation specialist.
    0 installs
76. ▌
    Kyverno Policy Review · vincentchuwaichow bundle

    Use this skill for Kyverno policy review across the stable policies.kyverno.io/v1 API surface — ValidatingPolicy, MutatingPolicy, GeneratingPolicy, DeletingPolicy, and ImageValidatingPolicy. Trigger when the user asks whether an admission policy is safe, whether a PolicyException is justified, whether a policy should be enforced or audited, whether a Kyverno policy should be replaced by a native ValidatingAdmissionPolicy (CEL), or whether image signature verification is correctly configured.
    0 installs
77. ▌
    Oci Cloud Guard Responder · vincentchuwaichow bundle

    OCI Cloud Guard Responder
    0 installs
78. ▌
    Oci Database Platform Dba · vincentchuwaichow bundle

    OCI Database Platform DBA
    0 installs
79. ▌
    Oci Multi Cloud Architect · vincentchuwaichow bundle

    OCI Multi-Cloud Architect
    0 installs
80. ▌
    Sap Abap Cloud Rap Review · vincentchuwaichow bundle

    Review ABAP Cloud and RESTful ABAP Programming Model (RAP) artifacts for clean-core compliance, released API usage, behavior definition and implementation correctness, CDS view design, BDEF modeling quality, authorization object coverage, and ABAP unit test completeness. Use when assessing RAP business objects on S/4HANA Cloud or BTP ABAP Environment. Does not touch live systems.
    0 installs
81. ▌
    Sap Btp Governance Review · vincentchuwaichow bundle

    SAP BTP Governance Review
    0 installs
82. ▌
    Typescript Maestro · vincentchuwaichow bundle

    Use this skill to classify a TypeScript task and route it to the narrowest static-review specialist on the TypeScript board, or to gate a production-mutation request to a named human owner. Trigger when a user brings a TypeScript compiler, type-system, runtime-boundary, module-resolution, Node-execution, declaration, build-graph, lint-policy, async-contract, publication, modernization, MCP tool-contract, privileged-automation, or engineering-economics task and the right specialist is not yet obvious. Routing and classification only — it never reviews TypeScript work itself, never answers a TypeScript question directly, never compiles or builds, and never contacts a live system.
    0 installs
83. ▌
    Model Registry Refresh · vincentchuwaichow

    Re-verify and extend catalog/model-registry.json — the fail-closed model-name and reasoning-effort matrix scripts/model-policy.mjs validates against — via delegated Context7-backed research, orchestrator-owned registry edits, and the full validation chain; use when a policy check fails on an unregistered model, a provider ships new models, or the registry has gone stale.
    0 installs
84. ▌
    Close Cycle Advisor · vincentchuwaichow bundle

    Multi-jurisdiction financial close cycle reference framework covering month-end, quarter-end, and year-end close. Provides regulatory filing deadlines by jurisdiction (SEC, EU TD, UK DTR, TSE/FSA, CSRC, SEBI, ASX, HKEX), record-to-report process steps, reconciliation standards, intercompany elimination requirements (ASC 810/IFRS 10), FX translation methodology (ASC 830/IAS 21), deferred tax computation (ASC 740/IAS 12), and GAAP variant comparison tables across US GAAP, IFRS, UK FRS 102, German HGB, JGAAP, CAS, and Ind AS. Advisory only — all outputs require external auditor verification for local statutory purposes.
    0 installs
85. ▌
    Alibaba Ram Iam Review · vincentchuwaichow bundle

    Audit Alibaba Cloud RAM users, groups, roles, and policies; review STS token lifecycle and scope; assess Resource Directory permission boundaries; review Control Policy statements for org-wide gaps or over-privilege.
    0 installs
86. ▌
    AWS CI CD Release Engineer · vincentchuwaichow bundle

    Review AWS CI/CD and release safety across CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab, artifact provenance, deployment gates, approvals, tests, progressive delivery, rollback, change correlation, and incident-prevention recommendations. Use when AWS releases or pipelines can affect production reliability or security.
    0 installs
87. ▌
    AWS Live Ecs Rollout Guard · vincentchuwaichow bundle

    Guard live Amazon ECS and Fargate rollout actions with ecs service, task definition, deployment circuit breaker, alarms, rollback, health check, and approval gates. Use only for intentional live ECS rollout actions against confirmed targets.
    0 installs
88. ▌
    AWS Resilience Bcdr Review · vincentchuwaichow bundle

    Review AWS resilience and business continuity strategy across RTO/RPO, dependency maps, multi-AZ, multi-Region, failover/failback, game days, runbooks, drift, and recovery validation. Prefer data protection backup steward for backup-plan/vault/restore implementation details.
    0 installs
89. ▌
    AWS Waf Reliability Review · vincentchuwaichow bundle

    Review AWS workload reliability posture against the Well-Architected Framework Reliability Pillar. Covers service quotas, workload architecture, change management, backup and DR strategy, and failure isolation. Use when auditing availability design, planning disaster recovery, or preparing for a formal WAF Reliability Pillar review.
    0 installs
90. ▌
    GCP Data Pipeline Engineer · vincentchuwaichow bundle

    Design and troubleshoot data pipelines using Dataflow (Apache Beam), Pub/Sub messaging, Dataproc (Spark/Hadoop), Cloud Composer (Apache Airflow), and Dataplex data governance.
    0 installs
91. ▌
    GCP Landing Zone Architect · vincentchuwaichow bundle

    Design and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.
    0 installs
92. ▌
    GCP Live Gke Rollout Guard · vincentchuwaichow bundle

    Gate GKE deployment mutations, node pool upgrades, and cluster control-plane version changes against rollback posture and PDB audit before any production change. Prevents irreversible node pool upgrades from proceeding without PodDisruptionBudget verification, surge settings review, and explicit operator approval.
    0 installs
93. ▌
    GCP Resilience Bcdr Review · vincentchuwaichow bundle

    Review GCP workload HA and BCDR designs — multi-region architectures, Cloud SQL HA failover, Spanner global instances, GKE multi-cluster, RTO/RPO target analysis, and runbook completeness.
    2 installs
94. ▌
    GCP Waf Reliability Review · vincentchuwaichow bundle

    Evaluate GCP workload reliability against the Google Cloud Well-Architected Framework reliability pillar — covering SLOs/error budgets, HA topology, horizontal scalability, observability, graceful degradation, failure testing, data recovery, and postmortems. Use when assessing availability requirements, designing resilient architectures, or auditing a GCP workload for reliability gaps.
    0 installs
95. ▌
    Oci Live Oke Rollout Guard · vincentchuwaichow bundle

    OCI Live OKE Rollout Guard
    0 installs
96. ▌
    Oci Storage Backup Steward · vincentchuwaichow bundle

    OCI Storage Backup Steward
    0 installs
97. ▌
    Oci Waf Reliability Review · vincentchuwaichow bundle

    OCI WAF Reliability Review
    0 installs
98. ▌
    Python Live Change Plan · vincentchuwaichow bundle

    Use this skill to produce a normalized change plan — an exact diff, a pre-approved rollback procedure, machine-checkable verification criteria, and a stable action digest — bound to an exact target. Read-only-runtime: it holds no production credentials and executes nothing.
    0 installs
99. ▌
    Python Live Job Control · vincentchuwaichow bundle

    Use this skill to operate a distributed job or business-automation process (retry, requeue, run): confirm both technical and business idempotency before acting, bound every retry instead of blindly retrying all failed jobs, and reconcile the actual business outcome rather than accepting the job's own success status.
    0 installs
100. ▌
     Python Live Policy Gate · vincentchuwaichow bundle

     Use this skill to evaluate a versioned, machine-readable policy bundle and control applicability against a live action's recorded inputs, producing candidate control results. Read-only-runtime: it cannot create an exception or an approval.
     0 installs