VincentChuWaiChow

@vincentchuwaichow source repo

760 skills
0 followers
1 day ago last updated

▌
Procure To Pay Protocol · vincentchuwaichow bundle
Use this skill to orchestrate the procure-to-pay (source-to-pay) process across Dynamics 365 Supply Chain Management, Finance, and compliance-aware separation-of-duties governance. It coordinates the journey from purchase requisition through purchase order approval, goods or services receipt, vendor invoice processing, and payment settlement. The skill enforces segregation-of-duties gates on purchase order approval, defines agent handoff rules, and escalates SoD conflicts to d365-security-sod-governance-agent. It does not approve purchase orders, release vendor payments, override procurement policies, or access vendor credentials; all production-impacting steps are escalated to the relevant specialist or human owner.

0 installs
▌
Salesforce Case Capsule · vincentchuwaichow bundle
Salesforce Case Capsule

0 installs
▌
Databricks Developer Platform · vincentchuwaichow bundle
Use this skill to review a Declarative Automation Bundle configuration, authentication setup, and deployment flow against production readiness criteria: bundle structure, deployment modes, run-as identity boundaries, variable resolution timing, OAuth and environment-variable authentication, Terraform versus direct deployment, Git folder segregation, and CI/CD gate design. Reads bundle configuration, CI/CD workflows, and Git branch structure; never executes commands, never deploys, and never accepts credentials.

0 installs
▌
Dotnet Aspire Cloud Native Review · vincentchuwaichow bundle
Use this skill when reviewing a .NET Aspire AppHost or service-defaults project for cloud-native readiness — health checks on declared service dependencies, service dependency wiring, resiliency policies on outbound calls, configuration and secret hygiene, configuration drift between the AppHost and service projects, container readiness evidence, and the boundary between Aspire's development-time composition model and a real deployment platform. Trigger when a user provides an Aspire AppHost project, a ServiceDefaults project, an Aspire manifest, or sanitized appsettings, asks whether their Aspire solution is cloud-native ready, or treats the AppHost as a production deploy target. This skill reviews source and sanitized configuration statically; it never runs the AppHost or deploys.

0 installs
▌
API Integration Contract Review · vincentchuwaichow bundle
Reviews frontend-to-backend API contracts — BFF route handlers and direct backend calls — for data-minimization, server-side object-level authorization enforcement, error-shape leakage, CORS misconfiguration, and backward-compatible versioning before they ship.

0 installs
▌
Javascript Runtime Async Review · vincentchuwaichow bundle
Review JavaScript/TypeScript for event-loop and microtask/macrotask ordering correctness, unhandled Promise rejection paths, DOM event-listener and timer cleanup, and race-condition risk in rapid-repeated-async UI patterns, tracing actual browser scheduling semantics rather than assumed synchronous-style reasoning about async code.

0 installs
▌
Nextjs Rendering Caching Review · vincentchuwaichow bundle
Statically review Next.js App Router route segments and fetch() calls for rendering-mode (static/ISR/dynamic) and Data-Cache misconfiguration, escalating cross-user data leakage to a security finding rather than a performance nit.

0 installs
▌
Vue State Store Security Review · vincentchuwaichow bundle
Statically review Pinia and legacy Vuex state stores for sensitive data persisted to localStorage/sessionStorage without scoping, untrusted server-payload hydration (window.__pinia/__INITIAL_STATE__) with un-escaped state serialization, SSR store-singleton cross-request pollution, store plugins/$subscribe/$onAction acting on untrusted payloads, client-held role flags used as an authorization source of truth, and devtools state exposure in production builds.

0 installs
▌
GCP Event Driven Architecture Review · vincentchuwaichow bundle
Review GCP Pub/Sub, Eventarc, Cloud Tasks, Cloud Scheduler, and Workflows designs — dead-letter topics, message ordering, idempotency, fan-out blast radius, schema registry, and retry storm risk.

0 installs
▌
GCP Observability Incident Responder · vincentchuwaichow bundle
Respond to incidents and set up observability using Cloud Monitoring, Cloud Logging, Error Reporting, Cloud Trace, and SLO burn rate alerting.

0 installs
▌
Hetzner Live Firewall Rule Guard · vincentchuwaichow bundle
Guard Hetzner Cloud Firewall rule mutations and server attachment changes with mandatory pre-mutation snapshot of current rules, blast-radius review, explicit human approval, target confirmation, account, region, and rollback plan. Use only when live Firewall rule changes are required and all pre-flight checks are confirmed.

0 installs
▌
Huawei Iam Least Privilege Review · vincentchuwaichow bundle
Audit Huawei Cloud IAM fine-grained policies, SCP (Service Control Policy) at Organizations level, agency trust relationships (cross-account delegation), and enterprise project permission boundaries.

0 installs
▌
Huawei Registry Artifact Governor · vincentchuwaichow bundle
Govern Huawei Cloud SWR (Software Repository for Container) — image retention policy, vulnerability scanning via VSS (Vulnerability Scan Service) integration, namespace permission least privilege, cross-region image replication, and supply chain security posture.

0 installs
▌
Ionos Datacenter Designer Reviewer · vincentchuwaichow bundle
Review IONOS Data Center Designer (DCD) topology for resource organization, multi-availability-zone placement, private LAN segmentation, volume layout, NIC configuration, and firewall posture. DCD is unique to IONOS as a graphical infrastructure orchestrator where topology changes carry datacenter-wide blast radius. Use when the user asks to review, redesign, or assess the safety of an IONOS datacenter topology or resource layout.

0 installs
▌
Ionos Kubernetes Platform Operator · vincentchuwaichow bundle
Review IONOS managed Kubernetes cluster and node pool configuration covering cluster readiness, node pool sizing and autoscaling, workload placement strategies, PodDisruptionBudget coverage, control-plane upgrade safety, kubeconfig management, LAN attachment, and GDPR-compliant cluster region selection. Use when the user asks to assess, configure, or troubleshoot IONOS managed Kubernetes clusters or node pools.

0 installs
▌
Ionos Security Compliance Reviewer · vincentchuwaichow bundle
Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.

0 installs
▌
Java Concurrency And Virtual Thread · vincentchuwaichow bundle
Use this skill when statically reviewing Java concurrency and Project Loom virtual-thread adoption for correctness and safety at scale — pooling or capping virtual threads, a virtual-thread migration that strips a bound on a limited downstream resource (connection pool, rate-limited API) without re-imposing it via a Semaphore, JDK-version-gated carrier-pinning risk from synchronized blocks (materially reduced from JDK 24 onward by JEP 491 versus JDK 21's JEP 444), ThreadLocal cost at millions-of-threads scale, StructuredTaskScope's preview status, and classic concurrency hygiene (visibility/atomicity, unbounded ExecutorService queues, ThreadLocal leaks in pooled executors). Trigger when a user provides Java source using Thread.ofVirtual/Executors.newVirtualThreadPerTaskExecutor, ExecutorService construction, synchronized blocks, or JFR pinning output and asks whether their virtual-thread usage or concurrency code is correct. Reads source and sanitized configuration only; it never runs a build, invokes a JDK,

0 installs
▌
Java Framework Production Readiness · vincentchuwaichow bundle
Use this skill when statically reviewing a Spring Boot, Quarkus, or Micronaut service for production readiness — externalized configuration, health/readiness/liveness endpoint wiring, graceful shutdown, jakarta namespace correctness plus the framework's JDK floor, build-time DI/AOT reflection safety, profile/config validation, and dependency BOM alignment. Trigger when a user provides a build file (pom.xml/build.gradle), application.properties/application.yml (sanitized), or source annotations and asks whether a service is ready to ship, what a pre-production checklist should cover, or why a rolling deploy drops requests or a native build fails at runtime. Reads source and sanitized configuration only; it never builds, runs, invokes a JDK, opens a live connection, or asserts framework EOL dates from memory.

0 installs
▌
Kotlin Library API Abi Governance · vincentchuwaichow bundle
Use this skill to statically review Kotlin library public-API evolution and binary/source compatibility for libraries consumed by both Kotlin and Java: binary-compatibility-validator .api snapshots and apiCheck gating, Explicit API mode, @JvmOverloads/@JvmStatic/@JvmName Java-facing surface shaping, and ABI-sensitive data-class and inline-function-body changes. Reads source and build configuration only; it never runs apiDump/apiCheck or publishes a release.

0 installs
▌
M365 Licensing Ea Optimization · vincentchuwaichow bundle
Review Microsoft 365 licensing posture and Enterprise Agreement optimization — SKU and plan fit analysis across E3, E5, F-SKUs and add-ons; group-based licensing assignment hygiene; unassigned and over-assigned license detection; true-up planning guidance; and cost-versus-capability analysis for EA, CSP, and MCA contract types. Advisory only; never make purchase commitments or guarantee savings. Group-based-licensing changes in production are live-guard gated.

0 installs
▌
Netsuite AI Connector MCP Skill · vincentchuwaichow bundle
Flashlight skill for reviewing the security and governance posture of NetSuite AI Connector Service (MCP) deployments. Verifies exact required permissions ('MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens' — not 'Log in using Access Tokens'), confirms the connecting role is never Administrator, validates explicit tool allowlists, checks HIPAA/BAA restrictions, and reviews prompt-injection testing coverage. T0 static review — no live account connection required. Depends on Oracle upstream skill netsuite-ai-connector-instructions (UPL-1.0) for tool-selection decision trees and SuiteQL safety patterns. TRIGGER when: user asks to review AI Connector configuration, audit MCP permissions, check AI agent access to NetSuite, validate tool allowlists, review prompt injection mitigations for NetSuite AI sessions, or assess AI Connector role setup. Trigger phrases: AI Connector, MCP Server Connection, NetSuite AI Service, MCP governance, tool allowlist, prompt injection NetSuite, AI agent permissions, O

0 installs
▌
Nvidia Agentic AI Platform Review · vincentchuwaichow bundle
Use this skill when reviewing agentic-AI platforms built on the NVIDIA stack — NeMo Agent Toolkit, NIM-as-tool patterns, retrieval-augmented generation pipelines, tool-call safety, agent memory boundaries, and per-tenant audit logging. Trigger when the user asks whether agent tool calls are sandboxed, whether agent memory is tenant-scoped, whether tool definitions are signed, or whether the deployment meets NCP-AAI expectations.

0 installs
▌
Nvidia Model Promotion Gatekeeper · vincentchuwaichow bundle
Use this skill when an operator is about to promote an NVIDIA NIM container from staging to production and needs a runtime-evidence go/no-go decision. The skill executes a fixed allowlist of cosign/crane/oras/grype commands against the candidate image, then emits a signed attestation JSON whose verdict is one of promote, block, or manual-review. Trigger when the user asks "is this NIM safe to promote", "verify this container before deploy", or hands the agent a `nvcr.io/...` image reference and a current-prod digest. Live tier counterpart to `nvidia-ngc-nim-supply-chain-governor` (which is static-review only).

0 installs
▌
Oci Fusion Apps Environment Operator · vincentchuwaichow bundle
OCI Fusion Apps Environment Operator

0 installs
▌
Oci Live Network Security Rule Guard · vincentchuwaichow bundle
OCI Live Network Security Rule Guard

0 installs
▌
Oci Live Vault Key Destruction Guard · vincentchuwaichow bundle
OCI Live Vault Key Destruction Guard

0 installs
▌
Oci Observability Incident Responder · vincentchuwaichow bundle
OCI Observability Incident Responder

0 installs
▌
Wordpress REST Block Security Review · vincentchuwaichow bundle
Use this skill to review WordPress plugin, theme, REST API, and block-editor code for missing or overly permissive REST permission_callback registration, unescaped dynamic block render_callback output, missing input validation/sanitization or output escaping, and missing nonce/capability checks on state-changing requests. Use when reviewing register_rest_route() calls, dynamic block render_callback/render.php files, form/admin-ajax handlers, or any code path that takes untrusted input and produces WordPress-rendered output. Static review only; it does not execute plugin/theme code and never contacts a live, sandbox, or staging WordPress install.

0 installs
▌
Python Free Threading Parallelism · vincentchuwaichow bundle
Use this skill to statically review Python free-threaded (no-GIL) adoption: invalidated GIL thread-safety assumptions, shared-state races, C-extension compatibility, and synchronization needs. Reads source, build config, and extension manifests only; it never builds or runs the free-threaded interpreter.

0 installs
▌
Python Live Rollback And Recovery · vincentchuwaichow bundle
Use this skill to execute only a previously approved, tested rollback procedure against the exact affected target. It confirms rollback authority and a captured before-state/snapshot reference exist before acting, then captures and reconciles the post-rollback state through an independent check. It never improvises a rollback during an active failure.

0 installs
▌
Sap Data Migration Cutover Readiness · vincentchuwaichow bundle
Review data migration and cutover READINESS for an SAP S/4HANA transformation. Assesses SAP Migration Cockpit approach, data quality and validation gate completeness, mock run results, cutover plan structure, rollback and fallback viability, reconciliation strategy, and go/no-go criteria. Advisory only — never executes migration, cutover, or any live data movement. Use when assessing whether a program is ready to proceed to cutover, not when executing one.

0 installs
▌
Sap Joule Governance Adoption Review · vincentchuwaichow bundle
SAP Joule Governance and Adoption Review

0 installs
▌
Snowflake Finops Cost Governor · vincentchuwaichow bundle
Use this skill to make Snowflake consumption accountable: decompose warehouse, serverless, AI, storage and transfer spend; distinguish budgets from resource monitors and find the uncontrolled surface; attribute credits by query tag, object tag and warehouse; design defensible chargeback; investigate anomalies and forecast variance; and evaluate optimization economics. Trigger on any cost, credit, budget, attribution, or spend-anomaly question. Static review only: it never resizes a warehouse, never sets a limit, and never calls a reduction a saving without volume-normalized evidence.

0 installs
▌
Terraform Engine Compatibility · vincentchuwaichow bundle
Use this skill to decide whether a Terraform core upgrade, a provider major upgrade, or a move between Terraform and OpenTofu is safe to adopt, in what order, and with what rollback. Enumerates breaking changes for the exact version pair, separates errors from forced replacements, tracks deprecation exposure, and treats the engine choice as a divergence register rather than a preference. Static review of version constraints, lock files, and upgrade guidance only.

0 installs
▌
Terraform Execution Governance · vincentchuwaichow bundle
Use this skill to judge whether the pipeline that executes Terraform or OpenTofu changes can be trusted with its privileges: runner identity lifetime and scope, the plan-versus-apply credential split, whether apply consumes the reviewed saved plan, how cleartext-sensitive plan artifacts move between stages, approval integrity, and every trigger that can reach the apply path. Static review of pipeline and runner configuration only — it never triggers, modifies, or approves anything.

0 installs
▌
Alibaba Actiontrail Audit Analyst · vincentchuwaichow bundle
Query Alibaba Cloud ActionTrail management API call history, build governance audit reports, create SLS-based compliance evidence trails, and detect anomalous admin activity patterns.

0 installs
▌
Alibaba Security Center Hardening · vincentchuwaichow bundle
Harden Alibaba Cloud security posture via Security Center (threat detection, vulnerability scanning, baseline checks), WAF, Anti-DDoS Pro, Cloud Firewall, and Network Traffic Analysis (NTA).

0 installs
▌
Azure Live Cost Budget Action Guard · vincentchuwaichow bundle
Gate Azure budget action changes and GPU/HPC SKU provisioning against approved spend limits, with quota audits and emergency spend-stop playbooks.

0 installs
▌
Azure Live Pim Jit Activation Guard · vincentchuwaichow bundle
Gate Entra ID PIM eligible role activations with justification, MFA, ticket binding, time-bound scope, and approval workflow gates before any privileged Azure role becomes active.

0 installs
▌
Contabo Cost Optimization Analyst · vincentchuwaichow bundle
Advisory skill for analyzing Contabo cost posture across contract periods, VPS/VDS product tiers, Storage VPS options, and add-ons including Private Networking, Additional IPs, Extra Storage, and Custom Images. Use when the user asks to reduce, explain, or optimize Contabo spending or when evaluating billing impact of period or sizing changes.

0 installs
▌
Close To Report Protocol · vincentchuwaichow bundle
Use this skill to coordinate the financial period close and reporting process across Dynamics 365 Finance and Microsoft Fabric / Power BI. It orchestrates subledger close, general ledger reconciliation, currency revaluation, consolidation, financial statement preparation, and report certification. The skill defines stage gates for subledger close, reconciliation sign-off, and report certification, and enforces structured handoffs between d365-finance-close-to-report-agent and fabric-power-bi-business-insights-governance-agent. It does not post journal entries, modify financial data, certify financial statements, or access live ledger credentials; all production-impacting steps are escalated to the relevant specialist or human finance owner.

0 installs
▌
Erp Crm Cutover Protocol · vincentchuwaichow bundle
Use this skill when a Dynamics 365 ERP or CRM implementation is approaching go-live and must progress through mock migration, data reconciliation, cutover runbook execution, rollback testing, and the Success by Design go-live gate before production switchover. Orchestrates d365-data-migration-cutover-agent as primary, d365-success-by-design-governance-agent for SbD gate sign-off, and d365-security-sod-governance-agent for separation-of-duties validation. Gates include reconciliation sign-off, rollback readiness, and SbD go-live gate. Never makes the go/no-go decision autonomously; all production-impacting steps require human owner and Microsoft FastTrack confirmation where applicable.

0 installs
▌
Salesforce Risk Taxonomy · vincentchuwaichow bundle
Salesforce Risk Taxonomy

0 installs
▌
Frontend Testing Strategy Review · vincentchuwaichow bundle
Reviews frontend test-pyramid shape, critical-path coverage, and flaky-test governance across unit, component, integration, and E2E layers (Vitest/Jest, Testing Library, Playwright/Cypress), loading framework references only when the task needs them.

0 installs
▌
State Management Decision Review · vincentchuwaichow bundle
Reviews whether data is correctly classified as server state, client state, or derived state, and whether the resulting store/cache design (query keys, invalidation, optimistic-update rollback, SSR instantiation, selector shape) avoids duplication, stale-data bugs, and unnecessary re-render cascades.

0 installs
▌
GCP Bigquery Cost Performance Analyst · vincentchuwaichow bundle
Analyze BigQuery slot reservation sizing, BI Engine acceleration, query cost estimation, dataset governance (expiration, access controls), and partitioning/clustering optimization to reduce on-demand scan costs.

0 installs
▌
GCP Certificate Manager Issuer Review · vincentchuwaichow bundle
Review GCP Certificate Manager and classic Google-managed TLS certificates — certificate map configuration, DNS authorization, CAA record validation, certificate rotation automation, wildcard vs SAN design, and expiry monitoring.

0 installs
▌
Hetzner Cost Optimization Analyst · vincentchuwaichow bundle
Review Hetzner Cloud cost posture across server type selection, idle Volumes, unattached Floating IPs and Primary IPs, underutilized Load Balancers, Storage Box consumption, and snapshot accumulation. Use when the user asks to reduce or explain Hetzner Cloud spend.

0 installs
▌
Huawei Ief Edge Computing Operator · vincentchuwaichow bundle
Manage IEF (Intelligent Edge Fabric) edge node lifecycle, edge application deployment as container workloads, IoT device twin management, and cloud-edge-device unified control plane with offline operation support.

0 installs
▌
Huawei Live Gaussdb Mutation Guard · vincentchuwaichow bundle
Gate GaussDB/RDS instance deletion, spec downgrade, and backup policy removal — database deletion is permanently destructive and MLPS Level 3 data destruction triggers mandatory 24-hour incident reporting.

0 installs
▌
Huawei Obs Data Perimeter Governor · vincentchuwaichow bundle
Govern Huawei Cloud OBS (Object Storage Service) data perimeters — bucket policy and ACL public exposure, Block Public Access configuration, VPC endpoint binding for private access, WORM (Object Lock), cross-region replication compliance, and MLPS 2.0 data residency enforcement.

0 installs
▌
Ionos Live Database Lifecycle Guard · vincentchuwaichow bundle
Execute and advise on IONOS DBaaS lifecycle operations for PostgreSQL, MariaDB, and MongoDB managed databases. Covers failover initiation, replica promotion, horizontal and vertical scaling, backup schedule review, point-in-time recovery, cluster deletion protection, and regional endpoint validation. Requires current backup verification, explicit RPO and RTO targets, and human approval before any mutation. Hard-stop when target, approval, or rollback plan is ambiguous.

0 installs
▌
Kotlin Coroutines Flow Reliability · vincentchuwaichow bundle
Use this skill to statically review Kotlin coroutine and Flow reliability — structured concurrency and cancellation cooperation, dispatcher selection and blocking-call confinement, cold Flow vs hot StateFlow/SharedFlow semantics and backpressure, and context propagation (transaction, trace, MDC, security) across suspension and dispatcher switches. Reads source only; it never runs coroutine code or profiles live timing.

0 installs
▌
Kotlin Serialization Wire Contract · vincentchuwaichow bundle
Use this skill to statically review kotlinx.serialization wire-contract safety and schema evolution: encodeDefaults/explicitNulls defaults and @EncodeDefault overrides, strict-decode ignoreUnknownKeys behavior, sealed-class closed polymorphism and class-discriminator conventions, and whether a schema change is additive or breaking given how defaults make a field optional on decode. Reads source and serializer configuration only; it never sends or receives real wire traffic.

0 installs
▌
D365 Customer Insights Journeys · vincentchuwaichow bundle
D365 Customer Insights — Data & Journeys

0 installs
▌
M365 Intune Endpoint Management · vincentchuwaichow bundle
Review and advise on Microsoft Intune endpoint management posture covering device enrollment, compliance policies, configuration profiles, app protection (MAM) policies, Conditional Access device-compliance signal, Windows Autopilot, update rings, and endpoint security baselines. Applies Zero Trust device-health-as-signal principles. Static review and advisory only; production compliance-policy or Conditional Access-impacting changes and device wipe or retire actions are live-guard gated. Refuses to weaken device compliance or Conditional Access requirements for convenience.

0 installs
▌
Nvidia AI Networking Fabric Review · vincentchuwaichow bundle
Use this skill when reviewing NVIDIA AI networking fabrics — Spectrum-X Ethernet or InfiniBand topology, NCCL collective tuning, RoCEv2 lossless DCQCN/PFC config, adaptive routing, congestion control, and east-west isolation between training jobs. Trigger when the user asks whether the fabric is non-blocking, whether NCCL chooses the right transport, whether PFC/ECN is configured correctly, or whether the deployment meets NCP-AIN expectations.

0 installs
▌
Oci Live Iam Policy Compartment Guard · vincentchuwaichow bundle
OCI Live IAM Policy Compartment Guard

0 installs
▌
Oci Live Resource Manager Stack Guard · vincentchuwaichow bundle
OCI Live Resource Manager Stack Guard

0 installs
▌
Oci Resource Search Inventory Analyst · vincentchuwaichow bundle
OCI Resource Search Inventory Analyst

0 installs
▌
Python Testing Quality Engineering · vincentchuwaichow bundle
Use this skill to statically review Python test-suite quality (pytest, hypothesis): fixture scope and isolation, mock misuse and wrong-target patching, control of time/randomness/environment, flakiness sources, assertion quality, coverage theater, async-test correctness, and property-based-testing signal. Reads test and source code only; it never runs the suite or measures coverage.

0 installs
▌
Salesforce Bulk Data Ops Skill · vincentchuwaichow bundle
Generates scripts for Salesforce bulk data operations: mass owner reassignment, record deduplication (Apex MergeOpportunities pattern), mass field update, batch close stale records, contact deactivation, and lead conversion. Outputs both Data Loader CSV transformation templates and Anonymous Apex scripts ready for sf apex run. T0 generation only — T2 dry-run execution requires salesforce-deployment-validator-skill. TRIGGER when: user says reassign owners, mass update field, deduplicate records, bulk close opportunities, mass deactivate contacts, data loader script, batch update, bulk reassign, clean up stale records. DO NOT TRIGGER when: single record updates (use salesforce-soql-explorer-skill for lookup then handoff), permanent hard-deletes (T3 prohibited, route to salesforce-live-guard-agent), schema or field changes (use salesforce-metadata-fetcher-skill).

0 installs
▌
Salesforce Field Mapping Skill · vincentchuwaichow bundle
Maps CSV or spreadsheet column headers to Salesforce field API names with type mismatch detection, missing-field flagging, picklist value normalization, and API name collision detection. Used during data migration from HubSpot, Pipedrive, Excel exports, and legacy CRMs. TRIGGER when: user says map these columns to salesforce fields, field mapping for migration, convert csv headers to api names, import field mapping, migrate data from hubspot/pipedrive/excel, column mapping for data loader. DO NOT TRIGGER when: live data migration execution (use salesforce-bulk-data-ops-skill), schema design or new field creation (use salesforce-data-architecture-agent), field-level security review (use salesforce-permission-model-review-skill).

0 installs
▌
Salesforce Flow Debugger Skill · vincentchuwaichow bundle
Diagnoses Salesforce Flow failures from pasted error messages or (in T1 mode) live Flow Interview logs fetched via sf CLI. Identifies the failing node, root cause, and provides specific fix recommendations including fault path design, data type corrections, and null handling. TRIGGER when: user says debug this flow error, flow failed with, flow interview error, why did my flow fail, flow is not working, flow throws error, flow interview fault. Trigger phrases: flow error, interview log, fault path, flow failed on. DO NOT TRIGGER when: writing new flows from scratch (route to generating-flow skill), reviewing static Flow configuration for quality (use salesforce-flow-automation-review-skill), deploying Flows to a new environment (use salesforce-deployment-validator-skill).

0 installs
▌
Salesforce Soql Explorer Skill · vincentchuwaichow bundle
Executes read-only SOQL queries against a connected Salesforce org via the sf data query CLI under T1 least-privilege scope (api + refresh_token only, Run As service account with no ModifyAllData/ViewAllData/ViewEncryptedData). Returns sanitized JSON with a structured audit envelope. Live operational counterpart to the static-review skills. TRIGGER when: user asks to query records, run SOQL, fetch live data, inspect records by ID, count records, run aggregate queries, or check field values in a live org. Trigger phrases: query my org, run SOQL, show me records where, how many opportunities, what is the value of field X on record Y. DO NOT TRIGGER when: user pastes a metadata XML export for static review (use salesforce-metadata-review-skill); request requires DML — write, update, delete — those are T3 prohibited; bulk data operations needed (use salesforce-bulk-data-ops-skill); only schema metadata needed without data (use salesforce-metadata-fetcher-skill).

0 installs
▌
Sap Ewm Tm Logistics Execution Review · vincentchuwaichow bundle
SAP EWM TM Logistics Execution Review

0 installs
▌
Sap Live Readonly Landscape Discovery · vincentchuwaichow bundle
Enumerate and export SAP BTP and S/4HANA landscape configuration using read-only list, get, describe, and export operations only. Use when read-only discovery of subaccounts, service instances, entitlements, destinations, ABAP system landscape objects, or transport routes is needed as evidence for advisory, audit, or compliance purposes. Requires pre-authorized read-only credentials. Never creates, updates, deletes, deploys, assigns, rotates, imports, or triggers any change.

0 installs
▌
Snowflake Live Rbac Grant Guard · vincentchuwaichow bundle
Approval-gated live guard for exactly one Snowflake privilege change: ONE privilege, on ONE securable, to or from ONE custom role. Use only after a human has read the effective-inheritance impact and returned written approval naming account, environment, securable, privilege, role, and accepted blast radius. Runs as a custom role owning only the target securable — never ACCOUNTADMIN, never MANAGE GRANTS. Refuses ALL PRIVILEGES, ownership transfer, system-role and PUBLIC targets, bulk operations, and unbounded future grants regardless of who approves.

0 installs
▌
Terraform Estate Reconciliation · vincentchuwaichow bundle
Use this skill to reconcile the Terraform or OpenTofu record with reality without destroying anything: classify drift and decide whether to adopt, revert, or accept it; plan a brownfield import with the right `id`/`identity` addressing and a no-op verification gate; and carry renames or restructures with `moved` and `removed` blocks instead of state surgery. Advisory only — it reads plans and source, never runs `import` or a state command.

0 installs
▌
Terraform Verification Strategy · vincentchuwaichow bundle
Use this skill to decide what verification a Terraform or OpenTofu change actually needs and what each option proves: `validate` versus a plan, `terraform test` run blocks with `command = plan` versus `command = apply`, mock providers, and assertions on the properties that would cause an outage. Procedure only — it produces a verification plan, not a pass/fail verdict; the owning agent (`terraform-reviewer` for module contracts, `terraform-plan-blast-radius-agent` for change safety) issues the verdict.

0 installs
▌
Indirect Tax Einvoicing Advisor · vincentchuwaichow bundle
Multi-jurisdiction indirect tax and e-invoicing reference framework covering VAT/GST compliance and mandatory electronic invoicing mandates across EU, Brazil, India, Mexico, China, UK, and Australia.

0 installs
▌
Alibaba Registry Artifact Governor · vincentchuwaichow bundle
Govern Alibaba Cloud Container Registry (ACR) — Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.

0 installs
▌
Azure Cosmosdb Application Developer · vincentchuwaichow bundle
Azure Cosmos DB Application Developer

0 installs
▌
Legal Hr Routing Protocol · vincentchuwaichow bundle
Use this skill when a Legal or HR matter must be classified and routed to the right specialist agent, when a matter crosses both domains and needs parallel review, or when Legal and HR agents disagree and the conflict must be resolved. It defines routing rules, the overlap handoff matrix, the controlled-handoff communication principles, and the conflict-resolution protocol. It does not give legal or HR advice and never makes a final routing decision binding on a human.

0 installs
▌
License To Value Protocol · vincentchuwaichow bundle
Use this skill when Microsoft 365 or Dynamics 365 licenses have been assigned and the organisation needs to measure adoption, instrument value outcomes, identify waste, and reclaim inactive licenses before purchasing more. Orchestrates microsoft-business-impact-value-realization-agent as primary. Gates include baseline definition before adoption target is set, and inactive-license reclaim before any new license purchase is recommended. Does not make purchase decisions or modify license assignments autonomously. Never requests credentials, tenant IDs, or customer data; production-impacting steps escalate to the licence owner or IT procurement team.

0 installs
▌
Netsuite Routing Protocol · vincentchuwaichow bundle
Use this skill when a NetSuite matter must be classified and routed to the right specialist agent, when a matter crosses multiple NetSuite domains and needs parallel review, when a live-account mutation intent must be gated, or when specialist agents disagree and the conflict must be resolved. It defines routing rules per matter type, the cross-domain overlap matrix covering finance × developer × identity × integration × analytics × OneWorld × AI-connector × compliance, and the conflict-resolution protocol. Does not give NetSuite or business advice; routing is a recommendation only and never makes a binding routing decision on behalf of a human owner.

0 installs
▌
Databricks Platform Reliability · vincentchuwaichow bundle
Use this skill to diagnose and design platform reliability using system-table evidence, job and pipeline execution review, cluster policies, instance pools, quota headroom, and disaster-recovery posture: job timeouts and retries, run-history retention, managed DR design, incident-evidence preservation, and quota limits. Reads job and pipeline definitions, cluster policies, system-table schemas, and incident logs; never executes queries or triggers live operations.

2 installs
▌
AI Generated Frontend Code Review · vincentchuwaichow bundle
Apply an elevated review pass to AI or LLM-generated frontend code changes, checking specifically for hallucinated framework APIs, slopsquatted or non-existent dependency names, unsanitized dynamic-HTML sinks, and missing accessibility semantics before the diff is merged.

0 installs
▌
Build Tooling Vite Webpack Review · vincentchuwaichow bundle
Reviews Vite and Webpack build/chunking configuration and bundle-size composition for duplicate dependencies, unsplit vendor chunks, and tree-shaking failures, always version-labeling config since Vite 8 replaced Rollup-era manualChunks with Rolldown-based codeSplitting.

0 installs
▌
Ssr Hydration Streaming Diagnosis · vincentchuwaichow bundle
Diagnoses hydration-mismatch errors and streaming/Suspense-boundary structural issues to their specific root cause — non-deterministic rendering source, missing error boundary, serial data-fetch waterfall, or premature auth-unchecked streaming — grounded in the exact React/Next.js version's diagnostic behavior.

0 installs
▌
Huawei Live Iam Policy Change Guard · vincentchuwaichow bundle
Gate IAM fine-grained policy and SCP mutations — account-wide blast radius, privilege escalation, and potential full access denial. SCP deny statements at Organizations level cascade to ALL member accounts and cannot be overridden by IAM policies. Prevents dangerous policy mutations from proceeding without blast-radius assessment, agency trust enumeration, and explicit operator approval.

0 installs
▌
Huawei Live Obs Bucket Policy Guard · vincentchuwaichow bundle
Gate OBS bucket ACL and policy mutations — public-read/write ACL exposes data immediately and CN-* cross-border replication may violate MLPS 2.0/CSL data localization requirements.

0 installs
▌
Huawei Support Incident Coordinator · vincentchuwaichow bundle
Coordinate Huawei Cloud support incidents — case creation with correct severity (紧急/高/中/低), Premium Support SLA enforcement, Account Manager and TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.

0 installs
▌
Huawei Waf Cost Optimization Review · vincentchuwaichow bundle
Assess Huawei Cloud cost efficiency using the Well-Architected Framework Cost Optimization pillar: ECS flavor selection including Kunpeng Arm, Yearly/Monthly vs Pay-Per-Use billing, Spot Instances, Enterprise Project cost attribution, and Cost Center monitoring.

0 installs
▌
Kotlin Backend Production Readiness · vincentchuwaichow bundle
Use this skill to statically review production readiness for Ktor servers and the Kotlin-on-Spring coroutine surface: server lifecycle/monitoring events, Netty/CIO graceful-shutdown configuration, StatusPages typed exception mapping, DI/AutoCloseable resource cleanup on shutdown, and correctly routing the coroutine-context-loss hazard behind suspend WebFlux handlers to its root-cause owner. Reads source and sanitized configuration only; it never runs or deploys a server.

0 installs
▌
Martech Access Governance Review · vincentchuwaichow bundle
Use this skill when reviewing access governance across a marketing technology stack — OAuth grants and connected apps, API keys and tokens, CRM and marketing-automation role assignments, and integration scopes. Trigger when a user provides an OAuth connected-app inventory, an integration scope list, a CRM/MAP role matrix, an API-key inventory, or asks whether their martech integrations are over-permissioned, whether stale connectors still hold live tokens, or how to apply least privilege to their marketing stack.

0 installs
▌
M365 Backup Bcdr Data Resilience · vincentchuwaichow bundle
Review Microsoft 365 backup posture and business continuity readiness — Microsoft 365 Backup coverage for Exchange Online, SharePoint, and OneDrive; retention-versus-backup distinction; ransomware recovery readiness; RPO and RTO targets; Backup Storage architecture; and third-party backup solution boundary guidance. Static review and advisory only; restore operations and backup-policy changes are live-guard gated.

0 installs
▌
M365 Live Identity Posture Guard · vincentchuwaichow bundle
Live read-only Microsoft Entra identity and Conditional Access posture discovery — enumerate CA policies, MFA coverage gaps, privileged role assignments and PIM configuration, risky sign-ins, and stale guest accounts — then propose least-privilege hardening steps with blast-radius assessment and rollback plan. Phase A read-only-runtime only; no mutation.

0 installs
▌
Netsuite Audit Controls Sox Skill · vincentchuwaichow bundle
Flashlight skill for reviewing NetSuite financial governance and SOX internal control configurations. T0 static review — no live account connection required. TRIGGER when: user asks to review segregation of duties, SoD conflicts, posting period controls, period-close procedures, revenue recognition schedules, approval workflow chains for journal entries or vendor bills, audit trail completeness, or SOX walkthrough evidence in NetSuite. Trigger phrases: SOX review, segregation of duties, SoD conflict, posting period locked, period close checklist, revenue recognition schedule, journal entry approval, audit trail, SOX material weakness, internal controls review. DO NOT TRIGGER when: request is about routine AP/AR transaction processing without a SOX angle (use netsuite-financial-foundations-agent), OAuth or TBA authentication setup (use netsuite-sso-oauth-tba-agent), SuiteFlow workflow syntax or builder mechanics (use netsuite-suiteflow-automation-agent), SuiteScript code security (use netsuite-suitescript-secu

0 installs
▌
Netsuite Sdf Devops Release Skill · vincentchuwaichow bundle
Static review flashlight for SuiteCloud Development Framework project structure, deployment controls, and environment promotion governance. Validates manifest.xml completeness, deploy.xml ordering, customrole permission XML against the 684-code SDF catalog, required documentation artifacts, and SuiteScript version gates. TRIGGER when: user asks to review an SDF project, validate a manifest.xml or deploy.xml, check deployment configuration, review environment promotion from sandbox to production, verify SuiteCloud release process, check for SuiteScript 1.0 code before deployment, confirm documentation artifacts are present, or audit SDF customrole permissions in a deployment object. Trigger phrases: sdf project structure, validate manifest xml, deploy xml review, sandbox to production netsuite, suitecloud deployment, sdf customdeploy, netsuite release pipeline, sdf environment promotion, suitescript version gate, architecture md missing. DO NOT TRIGGER when: the question is specifically about role SoD or permi

0 installs
▌
Nvidia AI Infrastructure Operations · vincentchuwaichow bundle
Use this skill when reviewing NVIDIA AI infrastructure deployments — DGX, HGX, MGX systems, GPU server install posture, BMC and out-of-band exposure, BIOS/firmware levels, vGPU host configuration, and rack-scale power/cooling/networking readiness. Trigger when the user asks whether a GPU host is provisioned per NVIDIA reference architecture, whether the BMC is segmented, whether driver/firmware versions match the AI Enterprise support matrix, or whether the deployment is in scope for NCA-AIIO or NCP-AII certification expectations.

0 installs
▌
Oci Devops Container Platform Engineer · vincentchuwaichow bundle
OCI DevOps Container Platform Engineer

0 installs
▌
Oci Live Autonomous DB Lifecycle Guard · vincentchuwaichow bundle
OCI Live Autonomous DB Lifecycle Guard

0 installs
▌
Python Container Serverless Runtime · vincentchuwaichow bundle
Use this skill to statically review containerized/serverless Python runtime behavior: PID 1 and signal handling, worker/process model, graceful shutdown, read-only-filesystem and cold-start assumptions, and dependency footprint. Reads Dockerfiles, process/server config, and source only; it never builds or runs a container.

0 installs
▌
Python Distributed Task Reliability · vincentchuwaichow bundle
Use this skill to statically review Python distributed task systems (Celery, RQ, Dramatiq): idempotency under at-least-once delivery, retry policy and backoff, dead-letter and poison-message handling, duplicate execution, acknowledgement timing, scheduling, and transactional-outbox boundaries. Reads task and config source only; it never enqueues, runs, or acknowledges a task.

0 installs
▌
Python Live Model Promotion Control · vincentchuwaichow bundle
Use this skill to promote exactly one immutable model artifact: confirm the artifact's provenance and integrity (hash/signature), an AI-risk classification, evaluation evidence matched to the deployment, live monitoring, and a rollback to the prior artifact before promoting, and record the AI-system role without declaring regulatory conformity.

0 installs
▌
Salesforce Apex Generator Skill · vincentchuwaichow bundle
Generates production-grade Apex classes with Service-Selector-Domain layering, correct sharing models (with sharing / without sharing / inherited sharing per class type), async patterns (Queueable, Batchable, Schedulable), and governor-limit awareness. T0 static generation — no org connection required. TRIGGER when: user asks to write an Apex class or trigger, generate a service/selector/domain layer, create an async job, implement a REST resource, scaffold a .cls file, or port business logic to Apex. Trigger phrases: write apex class, generate apex trigger, create apex service, .cls file, implement queueable, create batch job. DO NOT TRIGGER when: live test execution needed (use salesforce-apex-test-runner-skill), generating test classes specifically (use salesforce-apex-test-generator-skill), debugging an existing class from log evidence (use salesforce-apex-log-analyzer-skill), or the user needs a live deployment (use salesforce-deployment-validator-skill).

0 installs
▌
Salesforce Org Assessment Skill · vincentchuwaichow bundle
Salesforce Org Assessment Skill

0 installs
▌
Salesforce Soql Generator Skill · vincentchuwaichow bundle
Generates SOQL queries from natural-language requirements without executing them. T0 generation skill — emits ready-to-paste SOQL with selectivity analysis, governor-limit guidance, and a 100-point quality score. Pairs with salesforce-soql-explorer-skill for live execution. TRIGGER when: user describes a query in plain English, asks for SOQL syntax help, needs an aggregate or relationship query, wants a pipeline hygiene query, needs report-equivalent SOQL. Trigger phrases: "write SOQL for", "how do I query", "give me a SOQL query", "find all opportunities where", "count contacts with", "pipeline by stage SOQL", "stale leads query". DO NOT TRIGGER when: the query needs to be executed live (use salesforce-soql-explorer-skill); when DML is required (T3 — escalate); when the user wants permission-set diagnostic SOQL (specialized form — use salesforce-permission-model-review-skill).

0 installs
▌
Sap Data Privacy Analytics AI Protocol · vincentchuwaichow bundle
Cross-functional coordination protocol governing data privacy, analytics, and AI governance handoffs in SAP landscapes. Covers PII in Datasphere data products, analytics exports from SAP Analytics Cloud, RAG pipelines, embedding generation, prompt logging, SAP Generative AI Hub usage, Joule adoption, and model outputs that could leak sensitive business data. Defines data classification, consent and purpose limitation gates, approval requirements, and audit packaging. Never mutates live systems and never bypasses any guarded-mutating gate.

0 installs

760 published skills · page 5 of 8