@raishin/vanguard-frontier-agentic 1.3.0 → 1.4.0

package/skills/aws/aws-agentcore/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-agentcore
 description: Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, policy, and harness-vs-code-path decisions. Load references only when that component is needed.
+allowed-tools: Read Edit Write MultiEdit Grep Glob Bash
 metadata:
   author: "github: Raishin"
   version: "0.1.6"
+  updated: "2026-05-05"
+  category: ai
 ---
 
 # AWS AgentCore

package/skills/aws/aws-api-edge-delivery-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-api-edge-delivery-review
 description: Review AWS API and edge delivery posture across API Gateway, CloudFront, AWS WAF, Shield, ALB, custom domains, TLS policies, authentication, authorization, throttling, quotas, caching, origin protection, logging, and abuse controls. Use when public APIs, web entry points, or edge delivery can affect security and availability.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: networking
 ---
 
 # AWS API Edge Delivery Review

package/skills/aws/aws-bedrock-agent-security-governor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-bedrock-agent-security-governor
 description: Review Amazon Bedrock agents, AgentCore, Guardrails, knowledge bases, action groups, memory, MCP/tool integrations, prompt-injection and prompt-leakage defenses, PII handling, encryption, logging, observability, and least-privilege IAM. Use for AWS-native GenAI and agent security posture.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS Bedrock Agent Security Governor

package/skills/aws/aws-change-impact-advisor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-change-impact-advisor
 description: Assess AWS change impact using change sets, deployment blast radius, rollback readiness, dependency mapping, risk, go/no-go context, approval context, and stakeholder communication. Prefer this for non-destructive pre-change advisory work; prefer IaC or platform-specific skills for deep implementation review.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Change Impact Advisor

package/skills/aws/aws-ci-cd-release-engineer/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-ci-cd-release-engineer
 description: Review AWS CI/CD and release safety across CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab, artifact provenance, deployment gates, approvals, tests, progressive delivery, rollback, change correlation, and incident-prevention recommendations. Use when AWS releases or pipelines can affect production reliability or security.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS CI/CD Release Engineer

package/skills/aws/aws-compliance-evidence-mapper/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-compliance-evidence-mapper
 description: Map AWS compliance evidence for audits across Security Hub controls, AWS Config rules/conformance packs, Audit Manager assessments, evidence folders, manual evidence, AWS Artifact reports, CloudTrail, and control narratives. Use for evidence packaging and audit readiness, not general security hardening.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: compliance
 ---
 
 # AWS Compliance Evidence Mapper

package/skills/aws/aws-cost-anomaly-watch-coordinator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-cost-anomaly-watch-coordinator
 description: Review AWS cost anomalies using Cost Explorer, Cost Anomaly Detection, Budgets, usage spikes, commitments, and tagging gaps. Prefer this for proactive FinOps watch and non-destructive escalation; prefer aws-cost-optimization-governor for broader optimization strategy.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: finops
 ---
 
 # AWS Cost Anomaly Watch Coordinator

package/skills/aws/aws-cost-optimization-governor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-cost-optimization-governor
 description: Review AWS cost optimization and FinOps posture across Cost Explorer, Budgets, Cost Optimization Hub, Compute Optimizer, Savings Plans, Reserved Instances, tagging, showback, idle resources, rightsizing, storage, data transfer, and forecast risk. Use when the user asks to reduce or explain AWS cost.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: finops
 ---
 
 # AWS Cost Optimization Governor

package/skills/aws/aws-daily-operations-briefing-coordinator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-daily-operations-briefing-coordinator
 description: Prepare AWS daily operations briefings using CloudWatch, Personal Health Dashboard, Trusted Advisor, cost signals, deployment timelines, incidents, risks, and action backlog. Prefer this for non-destructive business and engineering status coordination; prefer observability, cost, or incident skills for deeper domain investigation.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: observability
 ---
 
 # AWS Daily Operations Briefing Coordinator

package/skills/aws/aws-data-protection-backup-steward/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-data-protection-backup-steward
 description: Review AWS backup and data protection implementation across AWS Backup, EBS/RDS/EFS/S3 recovery patterns, vaults, vault lock, retention, encryption, cross-account/cross-Region copy, restore testing, lifecycle, and recovery evidence. Prefer resilience BCDR review for broader RTO/RPO, failover, and business continuity design.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: resilience
 ---
 
 # AWS Data Protection Backup Steward

package/skills/aws/aws-deployment-hotfix-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-deployment-hotfix-operator
 description: Patch AWS deployment hotfix config, release parameters, manifest mistakes, environment drift, rollback blockers, and rollout blockers in-repo. Use for rapid non-destructive deployment corrections; do not use for live deploy/apply/destroy actions.
+allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Deployment Hotfix Operator

package/skills/aws/aws-devops-agent-skill-designer/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-devops-agent-skill-designer
 description: Design, review, and improve AWS DevOps Agent-compatible skills, investigation workflows, learned skills, tool-use best practices, agent type targeting, frontmatter descriptions, reference materials, and operational output contracts. Use when creating or adapting skills for AWS DevOps Agent or AWS-style incident agents.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS DevOps Agent Skill Designer

package/skills/aws/aws-dynamodb-data-modeling-performance-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-dynamodb-data-modeling-performance-review
 description: Review Amazon DynamoDB data modeling and performance across access patterns, partition keys, sort keys, secondary indexes, GSI/LSI design, hot partitions, query versus scan behavior, capacity mode, adaptive capacity, global tables, TTL, DAX, item size, transactions, and cost. Use when DynamoDB correctness, latency, scaling, or cost depends on table design.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: data
 ---
 
 # AWS DynamoDB Data Modeling Performance Review

package/skills/aws/aws-ec2-compute-operations-steward/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-ec2-compute-operations-steward
 description: Review Amazon EC2 compute operations across instances, Auto Scaling groups, Launch Templates, AMIs, Systems Manager, Patch Manager, Session Manager, EBS volumes, snapshots, health checks, instance refresh, lifecycle hooks, patch compliance, and fleet reliability. Use for EC2 day-2 operations and legacy workload stewardship.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS EC2 Compute Operations Steward

package/skills/aws/aws-ecs-fargate-platform-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-ecs-fargate-platform-operator
 description: Review Amazon ECS and Fargate platform operations across services, task definitions, task roles, execution roles, capacity providers, load balancers, deployment circuit breakers, blue/green, autoscaling, health checks, logs, secrets, networking, and rollback. Use only for ECS/Fargate; prefer EKS operator for Kubernetes.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS ECS Fargate Platform Operator

package/skills/aws/aws-ecs-service-remediation-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-ecs-service-remediation-operator
 description: Correct AWS ECS and Fargate service definitions, task definition config, deployment parameters, health checks, environment settings, and rollout wiring in-repo. Use for non-destructive repo fixes only; do not force deployments or mutate live services from this role.
+allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS ECS Service Remediation Operator

package/skills/aws/aws-eks-platform-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-eks-platform-operator
 description: Review Amazon EKS Kubernetes platform operations across cluster access, IRSA, IAM roles for service accounts, pod identity, node groups, Karpenter, autoscaling, CNI/network policy, upgrades, reliability, observability, and cost. Use only for EKS/Kubernetes; prefer ECS/Fargate operator for ECS services.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS EKS Platform Operator

package/skills/aws/aws-event-driven-architecture-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-event-driven-architecture-review
 description: Review AWS event-driven system design across EventBridge, event buses, Pipes, SQS, SNS, Step Functions, event schemas, filtering, cross-account routing, retries, DLQs, replay, idempotency, monitoring, and event-loop risk. Prefer serverless production readiness for Lambda runtime/deployment readiness.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS Event Driven Architecture Review

package/skills/aws/aws-generative-ai-developer/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-generative-ai-developer
 description: Build Amazon Bedrock and serverless generative AI applications using Lambda, API Gateway, Step Functions, EventBridge, S3, DynamoDB, SQS, Guardrails, and IAM. Prefer this for serverless GenAI app design and implementation; prefer aws-agentcore for AgentCore runtime, aws-bedrock-agent-security-governor for deep Bedrock security, and aws-serverless-production-readiness for final operational hardening.
+allowed-tools: Read Edit Write MultiEdit Grep Glob Bash
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: ai
 ---
 
 # AWS Generative AI Developer

package/skills/aws/aws-iac-change-safety-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-iac-change-safety-review
 description: Review AWS infrastructure-as-code changes across CDK, CloudFormation, SAM, Terraform, Serverless Framework, generated templates, plans, stack updates, change sets, and drift. Use when the user asks whether an AWS IaC deployment is safe, what a change set will do, why a resource replacement will happen, or how to validate before production.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS IaC Change Safety Review

package/skills/aws/aws-iac-patch-executor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-iac-patch-executor
 description: Edit AWS IaC files including CloudFormation, SAM, CDK config, and Terraform to patch defects, prepare change set review, or unblock rollout work. Prefer this for bounded repo changes only; do not use for apply, deploy, or destructive infrastructure execution.
+allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS IaC Patch Executor

package/skills/aws/aws-iam-least-privilege-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-iam-least-privilege-review
 description: Review AWS IAM identity policies, trust policies, resource policies, permission boundaries, SCPs, session policies, role design, pass-role, federation, and Access Analyzer findings for least-privilege risk. Prefer KMS/secrets steward for key/secret lifecycle design and S3 perimeter governor for S3 exposure/data-perimeter posture unless the request is primarily policy surgery.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS IAM Least Privilege Review

package/skills/aws/aws-kms-secrets-lifecycle-steward/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-kms-secrets-lifecycle-steward
 description: Review AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS KMS Secrets Lifecycle Steward

package/skills/aws/aws-landing-zone-governor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-landing-zone-governor
 description: Review and design AWS landing zones, AWS Control Tower environments, Organizations structures, OUs, account vending patterns, guardrails, central logging, security/audit accounts, and multi-account governance. Use when the user asks how to structure AWS accounts or govern a cloud estate.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: compliance
 ---
 
 # AWS Landing Zone Governor

package/skills/aws/aws-live-deployment-guarded-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-live-deployment-guarded-operator
 description: Operate guarded live AWS deployment changes with explicit account, region, profile, approval, dry-run, rollback, and verification gates. Use only when the target environment is confirmed and a live deployment action is intentionally requested.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Live Deployment Guarded Operator

package/skills/aws/aws-live-ecs-rollout-guard/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-live-ecs-rollout-guard
 description: Guard live Amazon ECS and Fargate rollout actions with ecs service, task definition, deployment circuit breaker, alarms, rollback, health check, and approval gates. Use only for intentional live ECS rollout actions against confirmed targets.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Live ECS Rollout Guard

package/skills/aws/aws-live-iac-change-guard/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-live-iac-change-guard
 description: Guard live CloudFormation, SAM, CDK, and Terraform-backed AWS infrastructure changes with change set, drift, stack policy, rollback trigger, approval, and execute gates. Use only for intentional live IaC execution with confirmed targets.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Live IaC Change Guard

package/skills/aws/aws-live-pipeline-approval-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-live-pipeline-approval-operator
 description: Handle live CodePipeline approval and gated resume decisions with pipeline, stage, approver, SNS, approval, blast radius, and rollback checks. Use only when a real pipeline execution is paused or about to be approved.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Live Pipeline Approval Operator

package/skills/aws/aws-live-serverless-release-guard/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-live-serverless-release-guard
 description: Guard live Lambda and serverless release actions with lambda alias, codedeploy, canary, linear, alarms, rollback, and approval gates. Use only for intentional live serverless rollout actions against confirmed targets.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Live Serverless Release Guard

package/skills/aws/aws-maestro/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-maestro
 description: Route AWS tasks to the narrowest specialist or team of specialists from the 42-agent catalog. Use when you do not already know the specialist. Not for direct AWS answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live deployment or production-change specialist.
+allowed-tools: Agent Skill Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: ai
 ---
 
 # AWS Maestro — Routing Skill

package/skills/aws/aws-migration-cutover-architect/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-migration-cutover-architect
 description: Plan, review, and de-risk AWS migrations and cutovers across discovery, dependency mapping, wave planning, AWS Application Migration Service, Migration Hub, test launches, acceptance tests, downtime windows, rollback, DNS, data consistency, and post-cutover validation. Use for migration planning and cutover readiness.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Migration Cutover Architect

package/skills/aws/aws-network-architect/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-network-architect
 description: Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: networking
 ---
 
 # AWS Network Architect

package/skills/aws/aws-non-destructive-task-automation-advisor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-non-destructive-task-automation-advisor
 description: Design AWS non-destructive task automation using EventBridge, Step Functions, Lambda, Systems Manager Automation, SNS, SQS, approvals, notifications, reporting, and evidence gathering. Use only for read-only or coordination-safe automation; do not use for destructive remediation or mutation-heavy runbooks.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Non-Destructive Task Automation Advisor

package/skills/aws/aws-observability-incident-responder/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-observability-incident-responder
 description: Investigate broad AWS incidents and observability gaps using CloudWatch metrics, logs, alarms, traces, EventBridge events, service health, runbooks, timelines, blast radius, root-cause discipline, and post-incident actions. Prefer RDS/Aurora investigator for database-specific performance incidents.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: observability
 ---
 
 # AWS Observability Incident Responder

package/skills/aws/aws-pipeline-fix-operator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-pipeline-fix-operator
 description: Repair AWS pipeline configuration, buildspecs, workflow files, deployment steps, artifact wiring, release guardrails, and CodeDeploy integration in-repo. Use for non-destructive CI/CD corrections; do not trigger live pipeline runs or mutate cloud state.
+allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Pipeline Fix Operator

package/skills/aws/aws-private-ca-issuer-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-private-ca-issuer-review
 description: Use this skill when reviewing AWS ACM Private CA (Private Certificate Authority) issuer configurations for cert-manager. Trigger on any request to audit AWSPCAIssuer, AWSPCAClusterIssuer, IRSA policy for cert-manager, certificate template ARNs, CRL configuration, or cross-account PCA usage.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS Private CA Issuer Review

package/skills/aws/aws-rds-aurora-performance-investigator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-rds-aurora-performance-investigator
 description: Investigate Amazon RDS and Aurora-specific incidents involving latency, connection exhaustion, slow queries, lock waits, storage pressure, CPU/I/O saturation, replica lag, failover behavior, Performance Insights, and database capacity. Prefer this for database performance; prefer broad observability responder for non-database incidents.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: observability
 ---
 
 # AWS RDS Aurora Performance Investigator

package/skills/aws/aws-resilience-bcdr-review/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-resilience-bcdr-review
 description: Review AWS resilience and business continuity strategy across RTO/RPO, dependency maps, multi-AZ, multi-Region, failover/failback, game days, runbooks, drift, and recovery validation. Prefer data protection backup steward for backup-plan/vault/restore implementation details.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: resilience
 ---
 
 # AWS Resilience BCDR Review

package/skills/aws/aws-s3-data-perimeter-governor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-s3-data-perimeter-governor
 description: Review Amazon S3 data perimeter and exposure posture across Block Public Access, Object Ownership, ACL removal, bucket/access point policies, TLS-only access, encryption, replication, lifecycle, logging, cross-account access, and prefix boundaries. Prefer this for S3 data exposure; prefer IAM skill for generic policy surgery.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS S3 Data Perimeter Governor

package/skills/aws/aws-security-posture-hardening/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-security-posture-hardening
 description: Review broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: security
 ---
 
 # AWS Security Posture Hardening

package/skills/aws/aws-serverless-production-readiness/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-serverless-production-readiness
 description: Review AWS Lambda-centered serverless workloads for production readiness across execution roles, event sources, retries, DLQs/destinations, concurrency, idempotency, observability, deployment safety, performance, cost, and rollback. Prefer event-driven architecture for EventBridge/SNS/SQS/Step Functions system design, and DynamoDB/RDS skills for data-store performance.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS Serverless Production Readiness

package/skills/aws/aws-serverless-rollout-corrector/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-serverless-rollout-corrector
 description: Patch AWS serverless rollout definitions across Lambda, API Gateway, EventBridge, SQS, SNS, event source wiring, aliases, versions, and deployment config. Prefer this for repo-side rollout corrections; do not perform live rollout actions or destructive operations.
+allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: delivery
 ---
 
 # AWS Serverless Rollout Corrector

package/skills/aws/aws-solution-architect/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-solution-architect
 description: Design and stress-test AWS cross-domain solution architectures when the request spans multiple AWS domains or needs an architecture decision record. Prefer narrower AWS skills for single-domain IAM, network, EKS, ECS, serverless, RDS, DynamoDB, S3, Bedrock, IaC, cost, security, migration, compliance, or incident asks.
+allowed-tools: Read Grep Glob
 metadata:
   author: "github: Raishin"
   version: "0.1.2"
+  updated: "2026-05-05"
+  category: platform
 ---
 
 # AWS Solution Architect

package/skills/aws/aws-ticket-triage-escalation-coordinator/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: aws-ticket-triage-escalation-coordinator
 description: Triage AWS tickets and alerts using priority, owner, evidence, incident context, escalation path, OpsCenter, health signals, and safe next steps. Prefer this for non-destructive request coordination and escalation; prefer deep domain skills for implementation or root-cause investigation.
+allowed-tools: Read Grep Glob WebFetch
 metadata:
   author: "github: Raishin"
   version: "0.1.0"
+  updated: "2026-05-05"
+  category: observability
 ---
 
 # AWS Ticket Triage Escalation Coordinator

package/skills/azure/azure-ai-foundry-ops-governor/SKILL.md

@@ -1,9 +1,12 @@
 ---
 name: azure-ai-foundry-ops-governor
 description: Use this skill for Microsoft Foundry and Azure AI Foundry operations governance: resource-versus-project boundary design, RBAC review, quota planning, network isolation, logging, and safe MCP-backed read or write execution. Trigger when the user asks how to run Foundry safely across teams without access sprawl, quota surprises, or unsafe production mutations.
+allowed-tools: Read Grep Glob
 metadata:
   author: github: Raishin
   version: 0.1.0
+  updated: "2026-05-05"
+  category: ai
 ---
 
 # Azure AI Foundry Ops Governor