VincentChuWaiChow

@vincentchuwaichow source repo

760 skills
0 followers
1 day ago last updated

▌
Plc Control Logic Safety Review · vincentchuwaichow bundle
Use this skill when reviewing exported PLC program logic (Ladder Diagram, Structured Text, Function Block Diagram, or Sequential Function Chart) for safety and reliability defects. Trigger when a user provides exported IEC 61131-3 program source, an I/O list, a safety requirements spec, a SIL assessment, or asks whether their PLC logic has a safe state, a correct E-stop implementation, unresolved latches, forced I/O, or interlock bypass risks. This is OT/ICS — defects injure people or destroy equipment. The skill performs static review only; it never connects to a live PLC, never writes to a controller, and never advises modifying running logic or bypassing a safety function.

0 installs
▌
Sap Security Hr Legal Protocol · vincentchuwaichow bundle
Cross-functional escalation protocol governing handoffs between SAP Security, HR, and Legal when identity misuse, privileged-access anomalies, SoD violations, insider-risk signals, HR-sensitive system access, joiner/mover/leaver lifecycle events, or fraud-sensitive access patterns require coordinated response. Defines decision rights, evidence standards, redaction policy, approval gates, and audit packaging. Never mutates live systems and never bypasses any guarded-mutating gate.

0 installs
▌
Velero Backup Restore Guard · vincentchuwaichow bundle
Use this skill when guarding Velero backup schedule changes, restore operations, BackupStorageLocation mutations, or volume snapshot configuration. Trigger on any request to run a velero restore, delete a Schedule, change a BSL default, or modify backup retention.

0 installs
▌
Hedge Accounting Advisor · vincentchuwaichow bundle
Multi-jurisdiction hedge accounting reference framework covering ASC 815 (US GAAP) and IFRS 9 hedge designation, effectiveness testing, OCI mechanics, IFRS 9 rebalancing, cost-of-hedging approach, discontinuation rules, embedded derivatives, and local GAAP treatments (German HGB §254, JGAAP ASBJ No.10, CAS 24, Ind AS 109). Includes fair value hedges, cash flow hedges, and net investment hedges with a multi-jurisdiction comparison table. Advisory only — all outputs require verification by qualified accountants and external auditors.

0 installs
▌
Lease Accounting Advisor · vincentchuwaichow bundle
Multi-jurisdiction lease accounting reference framework covering ASC 842 (US GAAP) and IFRS 16, with additional coverage of UK FRS 102 (2024 periodic review amendments effective 1 Jan 2026), German HGB, JGAAP (ASBJ Statement No. 34, effective FY beginning on/after 1 Apr 2027), CAS No. 21 (China), and Ind AS 116 (India). Covers lease identification, lessee classification (ASC 842 dual model vs. IFRS 16 single finance model), right-of-use asset and lease liability measurement, discount rates (incremental borrowing rate vs. rate implicit in lease), lessor accounting (sales-type / direct-financing / operating), short-term and low-value exemptions, lease modifications and remeasurement, and sale-leaseback transactions. Advisory only — all outputs require external auditor verification for local statutory purposes.

0 installs
▌
Alibaba Analyticdb Realtime · vincentchuwaichow bundle
Operate AnalyticDB for MySQL and PostgreSQL, Hologres real-time OLAP analytics, and DAS real-time diagnostics for sub-second interactive analytics workloads.

0 installs
▌
Alibaba Cost Finops Analyst · vincentchuwaichow bundle
Analyze Alibaba Cloud spend via Cost Manager, optimize Savings Plans and Reserved Instance coverage, design resource tagging strategy, investigate budget drift, and right-size over-provisioned ECS, RDS, and MaxCompute resources.

0 installs
▌
Alibaba Migration Architect · vincentchuwaichow bundle
Plan Alibaba Cloud migrations using SMC (Server Migration Center), DTS (Data Transmission Service) for data sync, OSSImport for object storage migration, and design cutover sequencing with rollback paths.

0 installs
▌
Alibaba Oss Storage Steward · vincentchuwaichow bundle
Manage OSS lifecycle policies, bucket policy and ACL governance, NAS/CPFS shared file storage, cross-region replication, and access control hardening for Alibaba Cloud object and file storage.

0 installs
▌
Alibaba Waf Security Review · vincentchuwaichow bundle
Assess Alibaba Cloud workload security posture: RAM least-privilege, VPC isolation, KMS/HSM encryption, Cloud Security Center threat detection, ActionTrail audit, WAF/Anti-DDoS web protection, and Chinese regulatory compliance (MLPS 2.0, DSL, PIPL).

0 installs
▌
AWS Devops Agent Skill Designer · vincentchuwaichow bundle
Design, review, and improve AWS DevOps Agent-compatible skills, investigation workflows, learned skills, tool-use best practices, agent type targeting, frontmatter descriptions, reference materials, and operational output contracts. Use when creating or adapting skills for AWS DevOps Agent or AWS-style incident agents.

0 installs
▌
AWS Migration Cutover Architect · vincentchuwaichow bundle
Plan, review, and de-risk AWS migrations and cutovers across discovery, dependency mapping, wave planning, AWS Application Migration Service, Migration Hub, test launches, acceptance tests, downtime windows, rollback, DNS, data consistency, and post-cutover validation. Use for migration planning and cutover readiness.

0 installs
▌
Azure AI Foundry Ops Governor · vincentchuwaichow bundle
Azure AI Foundry Ops Governor

0 installs
▌
Azure Network Topology Review · vincentchuwaichow bundle
Azure Network Topology Review

0 installs
▌
Cilium Network Policy Review · vincentchuwaichow bundle
Use this skill for Cilium network policy review across the three policy formats (Kubernetes NetworkPolicy, CiliumNetworkPolicy, CiliumClusterwideNetworkPolicy), L7 policy via embedded Envoy, ClusterMesh cross-cluster semantics, Hubble flow observability, and CiliumEgressGatewayPolicy. Trigger when the user asks whether a network policy is too broad, whether default-deny is in place, whether L7 rules will actually be enforced, whether ClusterMesh policy semantics are correct, or whether an egress gateway IP collision is possible.

0 installs
▌
Dotnet Aspnetcore API Review · vincentchuwaichow bundle
Use this skill when reviewing the architecture of an ASP.NET Core HTTP API — middleware ordering in the request pipeline, dependency-injection service lifetimes, CORS policy, model validation on bound input, API versioning, error and exception responses, rate limiting, and the boundary between health and readiness endpoints. Trigger when a user provides ASP.NET Core source (Program.cs, startup wiring, controllers, minimal-API endpoints) or sanitized appsettings, asks whether their API pipeline is wired correctly, or wants to know why requests behave unexpectedly across the middleware chain. This skill reviews source and sanitized configuration statically; it never runs the app or calls endpoints.

0 installs
▌
Dotnet Csharp Runtime Review · vincentchuwaichow bundle
Use this skill when reviewing C# language and runtime correctness — nullable reference types, async/await, cancellation, disposal, allocations on hot paths, LINQ misuse, and Native AOT / trimming hazards. Trigger when a user provides C# source or project files and asks whether the code is correct, why it deadlocks or starves the thread pool, why exceptions are being lost, why allocations are high, or whether the code is AOT- or trim-safe. This skill reviews C# source statically; it never compiles, runs, or instruments code.

0 installs
▌
Kubernetes Allocation Report · vincentchuwaichow bundle
Produce OpenCost-compatible namespace, pod, and workload cost allocation tables from user-supplied cluster shape data and public cloud pricing. Input is cluster topology provided by the caller; no cluster credentials or live API access are required or accepted. Output maps to FOCUS v1.2 columns.

0 installs
▌
Enterprise Red Team Review · vincentchuwaichow bundle
Run a mandatory adversarial review pass against Tier-1 specialist verdicts for frontend security review, AI-generated code review, and production incident workflows, hunting for exploit paths, WCAG failures automated tooling cannot catch, and prompt-injection artifacts in AI-generated code. Use before a change with security, accessibility, or AI-generated-code implications is allowed to reach the Board Chair.

0 installs
▌
I18N L10n Readiness Review · vincentchuwaichow bundle
Audit frontend code for internationalization readiness — externalized ICU MessageFormat strings, Intl-based date/number/currency/plural formatting, correct lang/dir attribute propagation, and RTL-safe CSS logical properties — before translation vendor engagement, with CLDR plural-rule detail loaded only when auditing countable strings.

0 installs
▌
React State Effects Review · vincentchuwaichow bundle
Statically review useState/useEffect/useReducer call sites against React's documented "You Might Not Need an Effect" anti-pattern catalog, plus race-condition and stale-closure detection via dependency-array and cleanup-function analysis, producing ranked file:line findings.

0 installs
▌
GCP Anthos Multicloud Architect · vincentchuwaichow bundle
Design and operate Anthos / GKE Enterprise fleet management, Config Management (GitOps with Policy Controller), multi-cloud Kubernetes across GCP, AWS, and Azure.

0 installs
▌
GCP Gcs Data Perimeter Governor · vincentchuwaichow bundle
Govern Google Cloud Storage data perimeters — uniform bucket-level access enforcement, public access prevention, VPC Service Controls perimeter coverage, IAM Conditions for time-bounded access, Object Lifecycle policies, and data residency compliance.

0 installs
▌
GCP Migration Cutover Architect · vincentchuwaichow bundle
Plan and execute migrations to GCP using Migrate to Virtual Machines, Database Migration Service, Storage Transfer Service, and design cutover sequencing with rollback plans.

0 installs
▌
Huawei Change Impact Advisor · vincentchuwaichow bundle
Pre-change blast radius analysis for Huawei Cloud — Organizations SCP cascade scope, IAM agency dependency chain, VPC route table and VPC Peering impact, GaussDB instance class change disruption, CCE node pool resize safety, and Enterprise Project boundary clarity.

0 installs
▌
Java Database Migration Safety · vincentchuwaichow bundle
Use this skill when statically reviewing a Flyway or Liquibase schema-migration PR for rolling or blue-green deploy safety — immutable applied-migration discipline (checksum/history-table drift on an edited already-applied migration), expand-contract phasing for column/table drops and renames, destructive DDL (drop column/table, type narrowing, NOT NULL without a default on a populated table) landing in the same release that stops using it, long-locking DDL on large tables, out-of-order migrations, non-idempotent repeatable migrations, and a stated rollback/backfill plan. Trigger when a user provides migration scripts or changelogs, a schema diff, or asks whether a migration is safe to ship, safe to roll back, or safe to run alongside an older application version during rollout. Reads migration files and sanitized schema/config only; it never opens a database connection, runs a migration, or queries live schema state.

0 installs
▌
Java Jdk Lifecycle And Upgrade · vincentchuwaichow bundle
Use this skill when statically reviewing a Java estate's JDK lifecycle and upgrade posture — identifying the JDK vendor and version, mapping them to support and license boundaries, finding language/API upgrade blockers, and prescribing a phased, evidence-gated upgrade path. Trigger when a user provides build files (pom.xml, build.gradle), toolchain/CI config, or a Dockerfile and asks whether their JDK is supported, what an upgrade will break, or how to sequence it. Reads build files and source only; it never runs a build, invokes a JDK, or asserts vendor lifecycle dates from memory.

0 installs
▌
Java Jpa Hibernate Performance · vincentchuwaichow bundle
Use this skill when statically reviewing JPA/Hibernate data access for fetch-strategy correctness and reliability — N+1 exposure, JOIN FETCH vs @EntityGraph vs @BatchSize vs DTO projection, LazyInitializationException and open-in-view misuse, pagination combined with a collection fetch (cartesian product), MultipleBagFetchException, and HikariCP connection-pool sizing. Trigger when a user provides entity classes, mappings, Spring Data repositories, or JPQL/Criteria queries and asks why queries are slow, why a page loads too much, or whether their data access is correct. Reads source and mapping only; it never opens a database connection, runs a query, or executes migrations.

0 installs
▌
Oci Migration Cutover Architect · vincentchuwaichow bundle
OCI Migration Cutover Architect

0 installs
▌
Oracle Oci MCP Grounded Advisor · vincentchuwaichow bundle
Oracle and OCI MCP Grounded Advisor

0 installs
▌
Ovhcloud Iam Policy Review · vincentchuwaichow bundle
Review OVHcloud IAM policies for overly permissive allow rules, missing deny blocks, unscoped URNs, absent condition blocks (IP CIDR, resource tag, expiration), and identity-group hygiene. Use when the user needs to audit access control, review `ovh_iam_policy` Terraform resources, assess OAuth2 service account scopes, or validate conditional access configuration against the principle of least privilege.

0 installs
▌
Ovhcloud Network Architect · vincentchuwaichow bundle
Design and review OVHcloud network topology including vRack private network segmentation, VLAN configuration, Public Cloud private network attachment, dedicated server connectivity, load balancer placement, DNS zone design, security group rules, and blast-radius scoping for topology changes. Use when the user needs vRack design guidance, network isolation review, or Terraform IaC review for `ovh_vrack` and related resources.

0 installs
▌
Python Live Code Remediation · vincentchuwaichow bundle
Use this skill to create a branch and pull request for a bounded code/dependency remediation and run approved isolated (non-production) validation against it. Mutating-runtime: it can never merge, deploy, or weaken a policy, gate, or test.

0 installs
▌
Python Live Control Evidence · vincentchuwaichow bundle
Use this skill to collect, hash, and seal control evidence to an approved, access-controlled, retention-managed destination and map it to controls as candidate support. It captures evidence quality dimensions, applies redaction/tokenization and retention/legal-hold, and never asserts a control is effective or a framework is satisfied.

0 installs
▌
Python Live System Inventory · vincentchuwaichow bundle
Use this skill to perform read-only discovery of Python runtimes, services, scheduled jobs, notebooks, packages, owners, environments, deployment revisions, service identities, and criticality, producing an asset and ownership register. Read-only-runtime: it never mutates a discovered asset and never retrieves raw credentials.

0 installs
▌
Sap Hana Cloud Performance Cost · vincentchuwaichow bundle
SAP HANA Cloud Performance and Cost Review

0 installs
▌
Sap Rise Sla Vendor Risk Review · vincentchuwaichow bundle
RISE with SAP SLA and Vendor Risk Review

0 installs
▌
Sap Security Iam Grc Sod Review · vincentchuwaichow bundle
SAP Security IAM GRC and SoD Review

0 installs
▌
Sap Testing Quality Gate Review · vincentchuwaichow bundle
SAP Testing and Quality Gate Review

0 installs
▌
Scaleway Iam Policy Review · vincentchuwaichow bundle
Review Scaleway IAM policies, API key governance, service account bindings, and organization/project-level permission sets for least-privilege posture. Use when the user asks to audit API key scopes, review IAM policy breadth, assess service account access, or tighten Scaleway identity controls. Surfaces overly broad access, missing expiry, and key sprawl risks with actionable remediation paths.

0 installs
▌
Scaleway Network Architect · vincentchuwaichow bundle
Scaleway Network Architect

0 installs
▌
Snowflake Bcdr Resilience · vincentchuwaichow bundle
Use this skill to test whether a Snowflake recovery claim is provable: replication versus failover groups and their membership, edition and region constraints, Client Redirect, RPO and RTO tracked as requested/feasible/proven, the dependency matrix outside Snowflake, DR drill scope and evidence, failover preconditions and data-loss window, and failback design. Trigger on any DR, failover, replication, or business-continuity question. Static review only: it never promotes or fails over anything, and it never accepts configured replication as proven recovery.

0 installs
▌
Snowflake Data Science Ml · vincentchuwaichow bundle
Use this skill to review the ML lifecycle in Snowflake for reproducibility and governability: feature engineering and leakage, point-in-time correctness and training/serving skew, training reproducibility, the model registry and versioning, batch and continuous inference, drift and performance monitoring, ML lineage, and retraining and rollback policy. Trigger when a model is moving toward or already in production. Static review only: it never trains, registers, deploys, or invokes a model, and it never accepts an offline metric as production readiness.

0 installs
▌
Terraform Module Contract · vincentchuwaichow bundle
Use this skill to review a Terraform or OpenTofu module as a reusable contract: whether its inputs are constrained rather than merely documented, whether its outputs promise more than intended, where each invariant belongs, whether a change is breaking for existing callers, and whether a proposed one-off module should exist at all given the platform modules already available. Static review of source and sanitized variable files only — it never runs the engine, contacts a registry, or reviews a plan.

0 installs
▌
Terraform Policy Evidence · vincentchuwaichow bundle
Use this skill to turn a Terraform or OpenTofu change into an auditable control decision: which controls it touches, whether the enforcing policy blocks or merely warns, whether the policy evaluates the plan or only the source text, whether an exception is scoped and expiring, and what evidence artifact could be produced months later. Advisory only — it never grants an exception, signs an attestation, or runs a policy engine.

0 installs
▌
Alibaba Devops Cicd Operator · vincentchuwaichow bundle
Build CI/CD pipelines with RDC (Research and Development Collaboration), Cloud Build, Flow pipeline automation, ACR (Container Registry) image lifecycle, and environment promotion strategies.

0 installs
▌
Alibaba Ecs Compute Operator · vincentchuwaichow bundle
Operate ECS instances, Auto Scaling groups, ECI serverless containers, and Cloud Assistant O&M automation. Handle instance lifecycle, image management, placement groups, spot/preemptible instances, and scheduled scaling.

0 installs
▌
AWS Serverless Rollout Corrector · vincentchuwaichow bundle
Patch AWS serverless rollout definitions across Lambda, API Gateway, EventBridge, SQS, SNS, event source wiring, aliases, versions, and deployment config. Prefer this for repo-side rollout corrections; do not perform live rollout actions or destructive operations.

0 installs
▌
AWS Waf Cost Optimization Review · vincentchuwaichow bundle
Review AWS workload cost posture against the Well-Architected Framework Cost Optimization Pillar. Covers cost visibility, tagging compliance, commitment coverage, rightsizing, Spot and managed service adoption, and idle resource identification. Use when auditing cloud spend, planning Savings Plans purchases, or preparing for a formal WAF Cost Optimization Pillar review.

0 installs
▌
Dotnet Performance Aot Review · vincentchuwaichow bundle
.NET Performance, AOT & Trimming Review

0 installs
▌
Dotnet Testing Quality Review · vincentchuwaichow bundle
Use this skill when statically reviewing .NET test suites for false confidence — assertion-free and tautological tests, over-mocking, coverage theater, weak test isolation, flaky patterns, and missing negative or security tests across xUnit, NUnit, and MSTest. Trigger when a user provides .NET test source (test classes, fixtures, mock setups, coverage configuration), asks why their green test suite still ships bugs, or wants to know whether their tests actually verify the system instead of inflating a coverage number. This skill reads test source only; it never runs the test suite, a coverage tool, or a test container.

0 installs
▌
Frontend Dom Xss Csp Review · vincentchuwaichow bundle
Review frontend source for DOM XSS sinks (innerHTML, dangerouslySetInnerHTML, v-html, document.write, eval-class APIs), verify actual attacker-reachable taint flow, and audit Content-Security-Policy and Trusted Types enforcement for real bypasses rather than header-presence checks, with framework-specific sink guidance loaded progressively.

0 installs
▌
Typescript Contracts Review · vincentchuwaichow bundle
Review TypeScript diffs and tsconfig strictness posture for sound type contracts — auditing any/assertion usage at trust boundaries, unsound narrowing, and exported public-API type-surface breakage — so that a passing compile is meaningful evidence rather than a decorative pass, and requiring paired runtime validation wherever external data enters the type system.

0 installs
▌
Wcag 22 Accessibility Audit · vincentchuwaichow bundle
Audit frontend markup, components, and design-system primitives against WCAG 2.2 Level A/AA success criteria and ARIA APG interaction patterns, separating automated-detectable violations from manual-verification-required items and flagging legal exposure, with reference material loaded progressively per success-criteria category.

0 installs
▌
GCP Apigee API Platform Operator · vincentchuwaichow bundle
Design and operate Apigee X API proxies — rate limiting, OAuth/JWT security policies, quota plans, developer portal setup, and API product management.

0 installs
▌
GCP Cloud Run Functions Operator · vincentchuwaichow bundle
Deploy and operate Cloud Run services, Cloud Functions gen2, Eventarc triggers, traffic splitting for progressive delivery, and cold-start optimization strategies.

0 installs
▌
GCP Compliance Assured Workloads · vincentchuwaichow bundle
Configure Assured Workloads for regulated workloads (FedRAMP High/Moderate, HIPAA, PCI-DSS, ITAR, IL4/IL5), audit controls implementation, and gather compliance evidence using Security Command Center and Asset Inventory.

0 installs
▌
GCP Live Iam Policy Change Guard · vincentchuwaichow bundle
Gate IAM binding mutations, org policy changes, and Service Account key creation against the GCP resource hierarchy. IAM bindings at org level propagate to all folders and projects — this guard enforces blast-radius assessment, audit-trail confirmation, and explicit authority approval before any policy mutation is executed.

0 installs
▌
GCP Secret Kms Lifecycle Steward · vincentchuwaichow bundle
Audit and govern Cloud KMS key lifecycles, Secret Manager secrets, CMEK configurations across GCP services (Cloud SQL, BigQuery, GCS, Compute), key rotation schedules, and envelope encryption patterns. Prefer gcp-iam-least-privilege-review for IAM binding review on KMS keys and gcp-security-posture-hardening for broad org-level encryption policy gaps.

0 installs
▌
GCP Support Incident Coordinator · vincentchuwaichow bundle
Coordinate GCP support incidents — case creation with correct severity, Premium/Enhanced Support SLA enforcement, TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.

0 installs
▌
GCP Waf Cost Optimization Review · vincentchuwaichow bundle
Evaluate GCP workload cost efficiency against the Google Cloud Well-Architected Framework cost optimization pillar — covering FinOps culture, cloud spending alignment with business value, resource rightsizing, commitment strategy, idle resource elimination, and continuous optimization. Use when reviewing cloud costs, designing cost-aware architectures, or identifying cost reduction opportunities in GCP.

0 installs
▌
Huawei Compliance Sovereignty · vincentchuwaichow bundle
Advise on Huawei Cloud MLPS 2.0 Level 3 technical controls mapping, China data localization requirements, Trusted Cloud (CAICT) certification controls, and government cloud configuration requirements for sovereignty-aware workloads.

0 installs
▌
Huawei Landing Zone Architect · vincentchuwaichow bundle
Set up Huawei Cloud Organizations with SCP baseline, IAM fine-grained permission structure, Enterprise Projects governance model, and master account structure for multi-account/multi-project governance.

0 installs
▌
Huawei Live Cce Rollout Guard · vincentchuwaichow bundle
Gate CCE deployment mutations, node pool upgrades, and cluster version changes against rollback posture and workload disruption budget before any production change. Prevents irreversible CCE cluster upgrades from proceeding without workload PDB verification, addon compatibility check, node pool drain confirmation, and explicit operator approval.

0 installs
▌
Huawei Resilience Bcdr Review · vincentchuwaichow bundle
Review Huawei Cloud workload HA and BCDR designs — GaussDB High Availability (HA) instance failover, CBR (Cloud Backup and Recovery) cross-region vault, CCE multi-AZ deployment, DRS (Data Replication Service) for DR, RTO/RPO target analysis, and runbook completeness.

0 installs
▌
Huawei Waf Reliability Review · vincentchuwaichow bundle
Assess Huawei Cloud workload reliability using the Well-Architected Framework Reliability pillar: AZ distribution, ELB load balancing, Auto Scaling, GaussDB and RDS multi-AZ HA, and CBR data protection.

0 installs
▌
Kotlin Kmp Portfolio Decision · vincentchuwaichow bundle
Use this skill to decide whether a product should adopt Kotlin Multiplatform at all, and how much to share, by weighing org topology and team ownership, product-roadmap alignment, platform-differentiation risk, skills/hiring constraints, lifecycle/maintenance cost, and reversibility. This skill can and must be able to recommend against KMP; it reasons from user-supplied context and never designs the expect/actual implementation.

0 installs
▌
Copilot Governance Maestro · vincentchuwaichow bundle
Route Microsoft Copilot and Copilot Studio governance requests to the narrowest specialist or team of specialists from the catalog. Use when you do not already know the specialist. Not for direct Copilot governance answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any broad agent publishing or connector/plugin access grant operation.

0 installs
▌
D365 Field Service To Cash · vincentchuwaichow bundle
Review Dynamics 365 Field Service operations across the service-to-cash (now "service to deliver") lifecycle — work order management, Universal Resource Scheduling, schedule board and Resource Scheduling Optimization, bookable resources, technician mobile execution, asset and preventive maintenance, inventory/truck stock, and work-order-to-invoice billing. Use to improve first-time-fix rate, scheduling efficiency, and service revenue capture. Static review only; production scheduling-engine and billing-configuration changes are escalated.

0 installs
▌
Netsuite Bi Reporting Skill · vincentchuwaichow bundle
Reviews and designs NetSuite reports, dashboards, and KPI definitions against BI & Reporting Associate/Specialist standards. Validates data-source scoping, period and subsidiary filters, KPI formula correctness, and financial narrative accuracy. TRIGGER when: user asks to review or design a NetSuite report, dashboard, KPI meter, financial narrative, chart, pivot, or executive summary; phrases include 'build a dashboard', 'review my report', 'create a KPI', 'why does this report show X', 'configure a portlet', 'financial narrative for the board', 'budget vs actual report'. DO NOT TRIGGER when: the request is about saved search criteria or column configuration (use netsuite-saved-searches-workbook-skill), SuiteAnalytics Workbook pivot/table mechanics (use netsuite-saved-searches-workbook-skill), or live execution of queries against a connected NetSuite org.

0 installs
▌
Oci Mysql Heatwave AI Specialist · vincentchuwaichow bundle
OCI MySQL HeatWave AI Specialist

0 installs
▌
Oci Security Compliance Reviewer · vincentchuwaichow bundle
OCI Security Compliance Reviewer

0 installs
▌
Oci Support Incident Coordinator · vincentchuwaichow bundle
OCI Support Incident Coordinator

0 installs
▌
Oci Waf Cost Optimization Review · vincentchuwaichow bundle
OCI WAF Cost Optimization Review

0 installs
▌
Python Packaging Supply Chain · vincentchuwaichow bundle
Use this skill to statically review Python packaging and software supply-chain integrity: pyproject build metadata, dependency locking and hash-checking, index trust and dependency confusion, build isolation, dependency specifiers, license metadata, and CI release-token exposure. Reads manifests and lockfiles only; it never installs packages, resolves environments, or contacts an index.

0 installs
▌
Sap Finance Fico Controls Review · vincentchuwaichow bundle
SAP Finance FI-CO Controls Review

0 installs
▌
Typescript Type Soundness · vincentchuwaichow bundle
Use this skill to statically review whether a type-level abstraction in shared or published TypeScript code actually proves what its signature claims: generic variance, conditional and mapped type correctness, dishonest type predicates, unsound narrowing, `satisfies` versus annotation, branded/nominal modelling, and `unknown`-first discipline. Reads source and sanitized `tsconfig.json` only; it never reviews a frontend application diff and never compiles or runs code.

0 installs
▌
Alibaba Change Impact Advisor · vincentchuwaichow bundle
Pre-change blast radius analysis for Alibaba Cloud — Resource Directory OU scope mapping, RAM policy cascade effects, VPC peering and CEN impact, SLB backend pool changes, RDS connection pool disruption, and safe change sequencing.

0 installs
▌
AWS Ecs Fargate Platform Operator · vincentchuwaichow bundle
Review Amazon ECS and Fargate platform operations across services, task definitions, task roles, execution roles, capacity providers, load balancers, deployment circuit breakers, blue/green, autoscaling, health checks, logs, secrets, networking, and rollback. Use only for ECS/Fargate; prefer EKS operator for Kubernetes.

0 installs
▌
AWS Kms Secrets Lifecycle Steward · vincentchuwaichow bundle
Review AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.

0 installs
▌
AWS Live Serverless Release Guard · vincentchuwaichow bundle
Guard live Lambda and serverless release actions with lambda alias, codedeploy, canary, linear, alarms, rollback, and approval gates. Use only for intentional live serverless rollout actions against confirmed targets.

0 installs
▌
Databricks SQL Performance · vincentchuwaichow bundle
Use this skill to statically review SQL warehouse and query performance: warehouse type and sizing for concurrency, Photon and Predictive I/O applicability, three-tier caching semantics and when a cached result is misleading, query-profile reading for skew and spill, data layout via liquid clustering and data skipping, and materialized-view refresh timing. Reads warehouse configuration, schema, query text, query profiles, query history, and ANALYZE output only; it never executes any query and never recommends a live mutation without explicit approval.

0 installs
▌
Fetch Foundation Model Pricing · vincentchuwaichow bundle
Fetch live per-token, per-image, and per-GPU-hour prices for foundation models across Anthropic, OpenAI, Google, AWS Bedrock, Azure OpenAI, OCI Generative AI, and Vertex AI. Supports single-model lookup and comparative multi-provider tables. Every price is labeled with source URL and ISO 8601 fetch timestamp. No credentials accepted.

0 installs
▌
Angular Ssr Hydration Review · vincentchuwaichow bundle
Statically review Angular SSR bootstrap configuration and component templates for hydration-mismatch risk (NG0500-class errors), unjustified ngSkipHydration usage, and direct-DOM-manipulation patterns that bypass Angular's template-owned DOM model, grounded in Angular's own hydration guide and error catalog.

0 installs
▌
Browser Compatibility Review · vincentchuwaichow bundle
Audit JS/CSS/HTML feature usage against the project's declared Browserslist/supported-browser matrix using Baseline and caniuse status data, flag unguarded non-Baseline usage, and verify feature-detection or polyfill fallback coverage, with per-feature caniuse/Baseline lookups loaded only for features actually in question.

0 installs
▌
Edge Cache Data Bleed Review · vincentchuwaichow bundle
Statically review Next.js App Router caching surfaces -- route-level revalidate exports, cache-boundary directives on server functions reading cookies(), generateStaticParams on personalized routes, and Cache-Control/Vary response headers -- for defects that let one user's authenticated response be cached and served back to a different user.

0 installs
▌
Frontend Bff Boundary Review · vincentchuwaichow bundle
Determines and reviews whether aggregation/shaping logic belongs in a Backend-for-Frontend layer versus client-side composition, and audits existing BFF boundaries for scope creep, duplicated aggregation logic, and leaked backend topology or pass-through authorization.

0 installs
▌
Pwa Offline Readiness Review · vincentchuwaichow bundle
Validates installability against W3C manifest criteria and tests real offline navigation behavior end to end, rejecting a manifest-schema-valid but practically non-installable or non-functional-offline PWA.

0 installs
▌
GCP Live Cost Budget Action Guard · vincentchuwaichow bundle
Gate Cloud Billing budget threshold changes, committed-use discount (CUD) purchases, and quota increase requests with explicit financial-authority approval. CUD contracts are 1-3 year financial commitments that cannot be cancelled — this guard ensures every billing action is backed by spend-impact assessment, budget inventory review, and confirmed financial authority before execution.

0 installs
▌
Ionos Cost Optimization Analyst · vincentchuwaichow bundle
Analyze IONOS Cloud cost posture and identify optimization opportunities across compute, storage, and managed services. Covers idle server and volume identification, CPU and memory utilization rightsizing, snapshot and backup cost review, managed service tier evaluation, contract and pricing strategy, cross-region consolidation feasibility, and cost showback. Use when the user asks to reduce, explain, or attribute IONOS Cloud spending.

0 installs
▌
Java Transaction And Consistency · vincentchuwaichow bundle
java-transaction-and-consistency

0 installs
▌
Kubernetes Pod Spec Review · vincentchuwaichow bundle
Use this skill when reviewing a Kubernetes Pod spec, Deployment spec, or StatefulSet spec for correctness, security posture, and production-readiness. Trigger on any request to audit, validate, or score a workload manifest.

0 installs
▌
D365 Data Migration Cutover · vincentchuwaichow bundle
Review Dynamics 365 data migration planning and go-live cutover readiness. Enforces mock migration evidence, data quality gates, staging table validation, reconciliation controls, cutover runbook completeness, rollback plan, and owner sign-off before production migration. Refuses to bless production cutover without reconciliation evidence and rollback plan. Production data migration is live-guard gated and requires escalation.

0 installs
▌
D365 Integration Dual Write · vincentchuwaichow bundle
Review Dynamics 365 integration design and operations — dual-write (Finance & Operations to/from Dataverse bidirectional sync), virtual entities, table map configuration, initial sync planning, error handling and monitoring, master-data ownership, and Power Platform integration boundary. Detects ERP/CRM data inconsistency, dual-write drift, integration failures, and broken master-data ownership. Refuses to approve enabling or disabling dual-write table maps in production or initial sync runs without dependency analysis, conflict resolution plan, and rollback readiness. Live-guard gated for enabling or disabling dual-write maps in production and initial sync runs.

0 installs
▌
Netsuite Administrator Skill · vincentchuwaichow bundle
Flashlight skill for reviewing NetSuite account administration configurations aligned to the Administrator Professional certification (N16291GC10). T0 static review — no live account connection required, never Administrator role. TRIGGER when: user asks to review accounting preferences, tax nexus setup, currency management, user provisioning policy, email template defaults, sandbox refresh procedures, release preview planning, or account-level system preferences in NetSuite. Trigger phrases: review account setup, audit user provisioning, check accounting preferences, validate tax configuration, sandbox refresh checklist, release preview prep, administrator review. DO NOT TRIGGER when: request concerns OAuth 2.0 or TBA authentication flows (use netsuite-sso-oauth-tba-agent), role permission and SoD matrix design (use netsuite-identity-access-role-permission-agent), financial close controls or posting periods (use netsuite-financial-foundations-agent), SuiteScript code review (use netsuite-application-developer

0 installs
▌
Netsuite Sso OAUTH Tba Skill · vincentchuwaichow bundle
Static review of NetSuite OAuth 2.0, TBA, and SSO/SAML configurations. Validates OAuth scope (REST/RESTlets only, not SOAP), TBA fallback timeline, SAML correctness, deprecated NLAuth, and sandbox re-authorization. Trigger: OAuth 2.0, TBA, SSO/SAML, token auth, RESTlet auth, SuiteAnalytics Connect auth, sandbox re-auth, SOAP auth migration. Escalate: role design (use identity-access-role-permission), SDF deploy (use sdf-devops-release), SuiteScript security (use suitescript-secure-code-review), live token ops (use live-org-mutation-guard), AI Connector auth (use ai-connector-mcp).

0 installs
▌
Oci Autonomous Database Architect · vincentchuwaichow bundle
OCI Autonomous Database Architect

0 installs
▌
Ovhcloud Cost Finops Analyst · vincentchuwaichow bundle
OVHcloud Cost FinOps Analyst

0 installs
▌
Python Data Access Transaction · vincentchuwaichow bundle
Use this skill to statically review Python database access and transactions (SQLAlchemy, Django ORM, DB-API): session and transaction scope, commit/rollback boundaries, N+1 and lazy-loading, connection-pool sizing, migration safety, and multi-tenancy scoping. Reads source, models, and migrations only; it never connects to a database or runs a migration.

0 installs
▌
Python Developer Tooling Build · vincentchuwaichow bundle
Use this skill to statically review Python developer tooling and build configuration: whether linters, type-checkers, and tests are wired to catch meaningful defects (not stylistic noise), CI gate coverage, tox/nox environment isolation, build-backend and project layout, and the pre-commit developer feedback loop. Reads tool, CI, and build configuration only; it never runs ruff, mypy, tox, pre-commit, or the CI pipeline.

0 installs

760 published skills · page 7 of 8