@raishin/vanguard-frontier-agentic 1.3.0 → 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/README.md +23 -1
  2. package/agents/kubernetes/kubernetes-live-admission-policy-guard-agent/metadata.json +2 -1
  3. package/agents/kubernetes/kubernetes-live-argocd-sync-guard-agent/metadata.json +2 -1
  4. package/agents/kubernetes/kubernetes-live-mesh-policy-guard-agent/metadata.json +2 -1
  5. package/agents/kubernetes/kubernetes-live-network-policy-guard-agent/metadata.json +2 -1
  6. package/agents/kubernetes/kubernetes-live-velero-restore-guard-agent/metadata.json +2 -1
  7. package/agents/kubernetes/kubernetes-psa-review-agent/metadata.json +2 -1
  8. package/agents/terraform/terraform-reviewer/AGENT.md +2 -1
  9. package/catalog/skill-manifest.json +414 -414
  10. package/package.json +23 -4
  11. package/schemas/AGENTS.md +14 -0
  12. package/schemas/agent.frontmatter.schema.json +89 -0
  13. package/schemas/agent.schema.json +8 -0
  14. package/schemas/skill.frontmatter.schema.json +95 -0
  15. package/scripts/apply-skill-allowed-tools.py +142 -0
  16. package/scripts/backfill-skill-metadata.py +410 -0
  17. package/scripts/export-marketplace-agents.mjs +175 -0
  18. package/skills/argocd/argo-rollouts-progressive-delivery-review/SKILL.md +3 -0
  19. package/skills/argocd/argocd-gitops-review/SKILL.md +3 -0
  20. package/skills/aws/aws-agentcore/SKILL.md +3 -0
  21. package/skills/aws/aws-api-edge-delivery-review/SKILL.md +3 -0
  22. package/skills/aws/aws-bedrock-agent-security-governor/SKILL.md +3 -0
  23. package/skills/aws/aws-change-impact-advisor/SKILL.md +3 -0
  24. package/skills/aws/aws-ci-cd-release-engineer/SKILL.md +3 -0
  25. package/skills/aws/aws-compliance-evidence-mapper/SKILL.md +3 -0
  26. package/skills/aws/aws-cost-anomaly-watch-coordinator/SKILL.md +3 -0
  27. package/skills/aws/aws-cost-optimization-governor/SKILL.md +3 -0
  28. package/skills/aws/aws-daily-operations-briefing-coordinator/SKILL.md +3 -0
  29. package/skills/aws/aws-data-protection-backup-steward/SKILL.md +3 -0
  30. package/skills/aws/aws-deployment-hotfix-operator/SKILL.md +3 -0
  31. package/skills/aws/aws-devops-agent-skill-designer/SKILL.md +3 -0
  32. package/skills/aws/aws-dynamodb-data-modeling-performance-review/SKILL.md +3 -0
  33. package/skills/aws/aws-ec2-compute-operations-steward/SKILL.md +3 -0
  34. package/skills/aws/aws-ecs-fargate-platform-operator/SKILL.md +3 -0
  35. package/skills/aws/aws-ecs-service-remediation-operator/SKILL.md +3 -0
  36. package/skills/aws/aws-eks-platform-operator/SKILL.md +3 -0
  37. package/skills/aws/aws-event-driven-architecture-review/SKILL.md +3 -0
  38. package/skills/aws/aws-generative-ai-developer/SKILL.md +3 -0
  39. package/skills/aws/aws-iac-change-safety-review/SKILL.md +3 -0
  40. package/skills/aws/aws-iac-patch-executor/SKILL.md +3 -0
  41. package/skills/aws/aws-iam-least-privilege-review/SKILL.md +3 -0
  42. package/skills/aws/aws-kms-secrets-lifecycle-steward/SKILL.md +3 -0
  43. package/skills/aws/aws-landing-zone-governor/SKILL.md +3 -0
  44. package/skills/aws/aws-live-deployment-guarded-operator/SKILL.md +3 -0
  45. package/skills/aws/aws-live-ecs-rollout-guard/SKILL.md +3 -0
  46. package/skills/aws/aws-live-iac-change-guard/SKILL.md +3 -0
  47. package/skills/aws/aws-live-pipeline-approval-operator/SKILL.md +3 -0
  48. package/skills/aws/aws-live-serverless-release-guard/SKILL.md +3 -0
  49. package/skills/aws/aws-maestro/SKILL.md +3 -0
  50. package/skills/aws/aws-migration-cutover-architect/SKILL.md +3 -0
  51. package/skills/aws/aws-network-architect/SKILL.md +3 -0
  52. package/skills/aws/aws-non-destructive-task-automation-advisor/SKILL.md +3 -0
  53. package/skills/aws/aws-observability-incident-responder/SKILL.md +3 -0
  54. package/skills/aws/aws-pipeline-fix-operator/SKILL.md +3 -0
  55. package/skills/aws/aws-private-ca-issuer-review/SKILL.md +3 -0
  56. package/skills/aws/aws-rds-aurora-performance-investigator/SKILL.md +3 -0
  57. package/skills/aws/aws-resilience-bcdr-review/SKILL.md +3 -0
  58. package/skills/aws/aws-s3-data-perimeter-governor/SKILL.md +3 -0
  59. package/skills/aws/aws-security-posture-hardening/SKILL.md +3 -0
  60. package/skills/aws/aws-serverless-production-readiness/SKILL.md +3 -0
  61. package/skills/aws/aws-serverless-rollout-corrector/SKILL.md +3 -0
  62. package/skills/aws/aws-solution-architect/SKILL.md +3 -0
  63. package/skills/aws/aws-ticket-triage-escalation-coordinator/SKILL.md +3 -0
  64. package/skills/azure/azure-ai-foundry-ops-governor/SKILL.md +3 -0
  65. package/skills/azure/azure-aks-platform-operator/SKILL.md +3 -0
  66. package/skills/azure/azure-app-service-production-readiness/SKILL.md +3 -0
  67. package/skills/azure/azure-cosmosdb-application-developer/SKILL.md +3 -0
  68. package/skills/azure/azure-cosmosdb-performance-investigator/SKILL.md +3 -0
  69. package/skills/azure/azure-cosmosdb-platform-operator/SKILL.md +3 -0
  70. package/skills/azure/azure-cost-estimation-review/SKILL.md +3 -0
  71. package/skills/azure/azure-cost-optimization-governor/SKILL.md +3 -0
  72. package/skills/azure/azure-entra-id-specialist/SKILL.md +3 -0
  73. package/skills/azure/azure-governance-policy-guardrails/SKILL.md +3 -0
  74. package/skills/azure/azure-identity-governance-review/SKILL.md +3 -0
  75. package/skills/azure/azure-key-vault-secret-lifecycle-auditor/SKILL.md +3 -0
  76. package/skills/azure/azure-keyvault-certificate-issuer-review/SKILL.md +3 -0
  77. package/skills/azure/azure-landing-zone-architect/SKILL.md +3 -0
  78. package/skills/azure/azure-live-aks-rollout-guard/SKILL.md +3 -0
  79. package/skills/azure/azure-live-app-service-slot-swap-guard/SKILL.md +3 -0
  80. package/skills/azure/azure-live-arm-deployment-stack-guard/SKILL.md +3 -0
  81. package/skills/azure/azure-live-cost-budget-action-guard/SKILL.md +3 -0
  82. package/skills/azure/azure-live-entra-role-assignment-guard/SKILL.md +3 -0
  83. package/skills/azure/azure-live-keyvault-rotation-purge-guard/SKILL.md +3 -0
  84. package/skills/azure/azure-live-pim-jit-activation-guard/SKILL.md +3 -0
  85. package/skills/azure/azure-maestro/SKILL.md +3 -0
  86. package/skills/azure/azure-migrate-landing-zone-cutover/SKILL.md +3 -0
  87. package/skills/azure/azure-network-topology-review/SKILL.md +3 -0
  88. package/skills/azure/azure-observability-investigator/SKILL.md +3 -0
  89. package/skills/azure/azure-platform-automation-devops/SKILL.md +3 -0
  90. package/skills/azure/azure-private-endpoint-adoption-planner/SKILL.md +3 -0
  91. package/skills/azure/azure-rbac-review/SKILL.md +3 -0
  92. package/skills/azure/azure-resilience-bcdr-review/SKILL.md +3 -0
  93. package/skills/azure/azure-resource-health-incident-triage/SKILL.md +3 -0
  94. package/skills/azure/azure-role-selector/SKILL.md +3 -0
  95. package/skills/azure/azure-security-posture-hardening/SKILL.md +3 -0
  96. package/skills/azure/azure-subscription-resource-organization/SKILL.md +3 -0
  97. package/skills/backstage/backstage-scaffolder-template-review/SKILL.md +3 -0
  98. package/skills/cert-manager/cert-manager-issuer-trust-review/SKILL.md +3 -0
  99. package/skills/cilium/cilium-network-policy-review/SKILL.md +3 -0
  100. package/skills/falco/falco-runtime-threat-rules-review/SKILL.md +3 -0
  101. package/skills/finops/finops-cloud-price-advisor/SKILL.md +3 -0
  102. package/skills/fluxcd/fluxcd-kustomization-helmrelease-review/SKILL.md +3 -0
  103. package/skills/istio/istio-ambient-mesh-review/SKILL.md +3 -0
  104. package/skills/kubernetes/external-secrets-operator-review/SKILL.md +3 -0
  105. package/skills/kubernetes/kubecost-chargeback-allocation-review/SKILL.md +3 -0
  106. package/skills/kubernetes/kubernetes-live-rbac-mutation-guard/SKILL.md +3 -0
  107. package/skills/kubernetes/kubernetes-maestro/SKILL.md +3 -0
  108. package/skills/kubernetes/kubernetes-pod-security-admission-review/SKILL.md +3 -0
  109. package/skills/kubernetes/kubernetes-pod-spec-review/SKILL.md +3 -0
  110. package/skills/kubernetes/kubernetes-rbac-review/SKILL.md +3 -0
  111. package/skills/kubernetes/kubernetes-workload-identity-review/SKILL.md +3 -0
  112. package/skills/kyverno/kyverno-policy-review/SKILL.md +3 -0
  113. package/skills/oci/oci-autonomous-database-architect/SKILL.md +3 -0
  114. package/skills/oci/oci-certificates-issuer-review/SKILL.md +3 -0
  115. package/skills/oci/oci-cloud-guard-responder/SKILL.md +3 -0
  116. package/skills/oci/oci-compute-instance-agent-operator/SKILL.md +3 -0
  117. package/skills/oci/oci-compute-platform-operator/SKILL.md +3 -0
  118. package/skills/oci/oci-cost-finops-analyst/SKILL.md +3 -0
  119. package/skills/oci/oci-database-platform-dba/SKILL.md +3 -0
  120. package/skills/oci/oci-dbtools-sql-analyst/SKILL.md +3 -0
  121. package/skills/oci/oci-devops-container-platform-engineer/SKILL.md +3 -0
  122. package/skills/oci/oci-exadata-database-architect/SKILL.md +3 -0
  123. package/skills/oci/oci-exadata-platform-architect/SKILL.md +3 -0
  124. package/skills/oci/oci-fusion-apps-environment-operator/SKILL.md +3 -0
  125. package/skills/oci/oci-goldengate-replication-operator/SKILL.md +3 -0
  126. package/skills/oci/oci-identity-access-governor/SKILL.md +3 -0
  127. package/skills/oci/oci-iot-digital-twin-engineer/SKILL.md +3 -0
  128. package/skills/oci/oci-limits-capacity-planner/SKILL.md +3 -0
  129. package/skills/oci/oci-live-autonomous-db-lifecycle-guard/SKILL.md +3 -0
  130. package/skills/oci/oci-live-cost-budget-runaway-guard/SKILL.md +3 -0
  131. package/skills/oci/oci-live-iam-policy-compartment-guard/SKILL.md +3 -0
  132. package/skills/oci/oci-live-network-security-rule-guard/SKILL.md +3 -0
  133. package/skills/oci/oci-live-oke-rollout-guard/SKILL.md +3 -0
  134. package/skills/oci/oci-live-resource-manager-stack-guard/SKILL.md +3 -0
  135. package/skills/oci/oci-live-vault-key-destruction-guard/SKILL.md +3 -0
  136. package/skills/oci/oci-load-balancer-traffic-engineer/SKILL.md +3 -0
  137. package/skills/oci/oci-maestro/SKILL.md +3 -0
  138. package/skills/oci/oci-migration-cutover-architect/SKILL.md +3 -0
  139. package/skills/oci/oci-multi-cloud-architect/SKILL.md +3 -0
  140. package/skills/oci/oci-mysql-heatwave-ai-specialist/SKILL.md +3 -0
  141. package/skills/oci/oci-network-architect/SKILL.md +3 -0
  142. package/skills/oci/oci-observability-incident-responder/SKILL.md +3 -0
  143. package/skills/oci/oci-recovery-service-operator/SKILL.md +3 -0
  144. package/skills/oci/oci-registry-artifact-governor/SKILL.md +3 -0
  145. package/skills/oci/oci-resource-search-inventory-analyst/SKILL.md +3 -0
  146. package/skills/oci/oci-security-compliance-reviewer/SKILL.md +3 -0
  147. package/skills/oci/oci-solution-architect/SKILL.md +3 -0
  148. package/skills/oci/oci-storage-backup-steward/SKILL.md +3 -0
  149. package/skills/oci/oci-support-incident-coordinator/SKILL.md +3 -0
  150. package/skills/oci/oracle-oci-mcp-grounded-advisor/SKILL.md +3 -0
  151. package/skills/opentelemetry/opentelemetry-collector-config-review/SKILL.md +3 -0
  152. package/skills/prometheus/prometheus-alerting-cardinality-review/SKILL.md +3 -0
  153. package/skills/sigstore/sigstore-cosign-supply-chain-review/SKILL.md +3 -0
  154. package/skills/terraform/terraform-maestro/SKILL.md +3 -0
  155. package/skills/velero/velero-backup-restore-guard/SKILL.md +3 -0
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: kubernetes-rbac-review
3
3
  description: Use this skill for Kubernetes RBAC, Role, ClusterRole, RoleBinding, ClusterRoleBinding, ServiceAccount, workload identity, or least-privilege review tasks. Trigger when the user asks whether cluster access is too broad, how to grant workload permissions safely, or how to audit RBAC state.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # Kubernetes RBAC Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: kubernetes-workload-identity-review
3
3
  description: Use this skill for Kubernetes workload identity review covering AWS IRSA (IAM Roles for Service Accounts), Azure Workload Identity, GCP Workload Identity Federation, and the underlying ServiceAccount token volume projection plus OIDC issuer trust. Trigger when the user asks how a pod should authenticate to cloud services, whether long-lived credentials in a Secret can be replaced, whether the OIDC trust policy is correctly scoped, or whether ServiceAccount token reuse is a risk.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # Kubernetes Workload Identity Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: kyverno-policy-review
3
3
  description: Use this skill for Kyverno policy review across the stable policies.kyverno.io/v1 API surface — ValidatingPolicy, MutatingPolicy, GeneratingPolicy, DeletingPolicy, and ImageValidatingPolicy. Trigger when the user asks whether an admission policy is safe, whether a PolicyException is justified, whether a policy should be enforced or audited, whether a Kyverno policy should be replaced by a native ValidatingAdmissionPolicy (CEL), or whether image signature verification is correctly configured.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # Kyverno Policy Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-autonomous-database-architect
3
3
  description: OCI Architect and operate Autonomous Database and Autonomous AI Database across serverless, dedicated Exadata, Cloud@Customer, Oracle Database@Azure, Oracle Database@Google Cloud, and Oracle Database@AWS contexts. Use for ADB design, compatibility, deployment-option selection, networking, security, DR, backup, migration, performance, and multicloud destination reviews.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI Autonomous Database Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-certificates-issuer-review
3
3
  description: Use this skill when reviewing OCI Certificates Service issuer configurations for cert-manager on OKE. Trigger on any request to audit OCI CA hierarchy, issuance rules, OKE Workload Identity vs Instance Principal auth, IAM policy scope, OCSP reachability, or certificate version management.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # OCI Certificates Issuer Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-cloud-guard-responder
3
3
  description: Triage and govern OCI Cloud Guard problems, targets, responder recipes, detector findings, and security remediation safely. Use for Cloud Guard reviews, problem prioritization, remediation planning, and compliance evidence when official Oracle MCP tools or documentation fallback are needed.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # OCI Cloud Guard Responder
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-compute-instance-agent-operator
3
3
  description: Operate OCI Compute Instance Agent commands and executions safely for diagnostics, automation, and remediation. Use when issuing, tracking, or reviewing instance-agent commands across compute fleets.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Compute Instance Agent Operator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-compute-platform-operator
3
3
  description: Operate OCI Compute instances and platform capacity safely with compartment/region confirmation, instance lifecycle guardrails, least-privilege IAM checks, MCP/CLI discovery, and rollback-aware change plans.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Compute Platform Operator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-cost-finops-analyst
3
3
  description: "Analyze Oracle Cloud Infrastructure cost, usage, budgets, tagging, rightsizing, commitment coverage, and FinOps governance. Use when asked to explain OCI spend, investigate cost spikes, build savings plans, review underused resources, design chargeback/showback, or challenge cost-optimization assumptions without breaking reliability."
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: finops
7
10
  ---
8
11
 
9
12
  # OCI Cost FinOps Analyst
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-database-platform-dba
3
3
  description: Operate as a ruthless OCI database platform DBA for DB systems, Autonomous Database, Exadata, backups, patching, performance triage, capacity, and IAM-scoped database operations. Use when work touches OCI Database service posture, discovery, troubleshooting, change review, or least-privilege access.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI Database Platform DBA
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-dbtools-sql-analyst
3
3
  description: Use OCI Database Tools and database documentation safely for SQL inspection, report definitions, table metadata, and controlled query execution. Use for DBTools connections, read-only SQL analysis, and schema/report exploration.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI Database Tools SQL Analyst
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-devops-container-platform-engineer
3
3
  description: "Engineer and review Oracle Cloud Infrastructure DevOps, OKE, OCIR, build/deploy pipelines, Kubernetes platform, and container runtime workflows. Use when asked to inspect OCI Container Engine clusters, DevOps projects, OCIR repositories, CI/CD IAM, deployment safety, cluster operations, image promotion, or container platform reliability."
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI DevOps Container Platform Engineer
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-exadata-database-architect
3
3
  description: Design, review, migrate, and operate Oracle Exadata Database Service across OCI Dedicated Infrastructure, Exascale Infrastructure, Cloud@Customer, and Oracle Database multicloud destinations including Azure, Google Cloud, and AWS, with official-doc grounding.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI Exadata Database Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-exadata-platform-architect
3
3
  description: OCI Design and operate Exadata Database Service across OCI Dedicated Infrastructure, Exadata Cloud@Customer, Oracle Database@Azure, Oracle Database@Google Cloud, and Oracle Database@AWS. Use for Exadata architecture, VM clusters, cloud Exadata infrastructure, Exascale, RAC, Data Guard, backup, migration, compatibility, capacity, network, and multicloud destination reviews.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Exadata Platform Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-fusion-apps-environment-operator
3
3
  description: OCI Review Fusion Apps as a Service environment families, environments, lifecycle status, availability, and operational readiness. Use for Fusion environment inventory, status checks, change planning, and support evidence.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Fusion Apps Environment Operator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-goldengate-replication-operator
3
3
  description: OCI Operate and review Oracle GoldenGate domains, connections, extracts, replicats, checkpoint tables, trails, distribution paths, and replication health. Use for replication setup, lag triage, data movement, and cutover safety.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI GoldenGate Replication Operator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-identity-access-governor
3
3
  description: Govern OCI Identity and Access Management with least-privilege policy review, compartment scoping, group/dynamic-group analysis, and safe access-change workflows. Use for OCI IAM policy design, access audits, privilege reduction, identity troubleshooting, or destructive-access risk review.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: compliance
7
10
  ---
8
11
 
9
12
  # OCI Identity Access Governor
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-iot-digital-twin-engineer
3
3
  description: Design and operate OCI IoT digital twin adapters, models, instances, relationships, and domain context. Use for digital twin topology, lifecycle, integration, and safe model/relationship changes.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: ai
7
10
  ---
8
11
 
9
12
  # OCI IoT Digital Twin Engineer
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-limits-capacity-planner
3
3
  description: Review OCI service limits, quotas, capacity availability, regional subscriptions, and growth risk. Use before deployments, migrations, DR expansion, shape changes, OKE scaling, database scaling, or quota increase requests.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Limits Capacity Planner
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-autonomous-db-lifecycle-guard
3
3
  description: Guard Autonomous Database lifecycle changes — scale, start, stop, clone, terminate — with protection-tag enforcement, backup verification, and connection-string impact analysis before any mutation.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: data
7
10
  ---
8
11
 
9
12
  # OCI Live Autonomous DB Lifecycle Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-cost-budget-runaway-guard
3
3
  description: Gate OCI budget mutations and GPU/HPC shape provisioning against compartment spend limits, with inventory searches, quota audits, and emergency spend-stop playbooks.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: finops
7
10
  ---
8
11
 
9
12
  # OCI Live Cost Budget Runaway Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-iam-policy-compartment-guard
3
3
  description: Guard OCI IAM policy writes and dynamic group changes with verb-hierarchy audit, compartment scope enforcement, anti-pattern detection (any-user/any-group), and rollback via statement restore.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # OCI Live IAM Policy Compartment Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-network-security-rule-guard
3
3
  description: Guard live OCI Security List and Network Security Group (NSG) rule changes with current-state capture, open-internet and sensitive-port detection, stateful/stateless assessment, and explicit approval before ingress or egress rule mutation. Use only when an intentional network rule change targets a confirmed VCN component.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # OCI Live Network Security Rule Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-oke-rollout-guard
3
3
  description: Guard OKE deployment rollouts via DevOps Service approval stages with canary and blue-green evidence, rollout health verification, and kubectl rollout undo gates.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: delivery
7
10
  ---
8
11
 
9
12
  # OCI Live OKE Rollout Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-resource-manager-stack-guard
3
3
  description: Guard OCI Resource Manager stack plan, apply, and destroy jobs with drift detection, state-version rollback, stack auto-lock awareness, and approval gates.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: delivery
7
10
  ---
8
11
 
9
12
  # OCI Live Resource Manager Stack Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-live-vault-key-destruction-guard
3
3
  description: Guard Vault master encryption key scheduled-deletion and HSM rotation with data-association audits, key-usage reference checks, deletion-window enforcement, and cancellation playbooks.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # OCI Live Vault Key Destruction Guard
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-load-balancer-traffic-engineer
3
3
  description: Design, review, and troubleshoot OCI Load Balancer and Network Load Balancer traffic paths, listeners, backend sets, certificates, health checks, logging, and failover. Use for L7/L4 traffic engineering and availability reviews.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: networking
7
10
  ---
8
11
 
9
12
  # OCI Load Balancer Traffic Engineer
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-maestro
3
3
  description: OCI Maestro routing skill. Classify the user's OCI task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team for multi-domain tasks. Never auto-dispatch live-guard agents.
4
+ allowed-tools: Agent Skill Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: ai
7
10
  ---
8
11
 
9
12
  # OCI Maestro Routing Skill
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-migration-cutover-architect
3
3
  description: Plan OCI migrations and cutovers with Cloud Migrations, dependency discovery, waves, rollback, DNS, data sync, validation, and support readiness. Use for migration assessment, move groups, cutover runbooks, and go/no-go reviews.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: delivery
7
10
  ---
8
11
 
9
12
  # OCI Migration Cutover Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-multi-cloud-architect
3
3
  description: Design and review OCI multi-cloud architectures connecting Oracle Cloud Infrastructure with AWS, Azure, Google Cloud, on-premises, or SaaS through VPN, FastConnect, Direct Connect, ExpressRoute, Cloud Interconnect, identity federation, DNS, routing, security, observability, and operating-model controls.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Multi-Cloud Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-mysql-heatwave-ai-specialist
3
3
  description: OCI Operate and review MySQL HeatWave, MySQL AI, vector/RAG workflows, connection configs, object storage ingestion, and SQL safety. Use for MySQL AI questions, HeatWave ML, vector store loading, and MySQL operational reviews.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: ai
7
10
  ---
8
11
 
9
12
  # OCI MySQL HeatWave AI Specialist
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-network-architect
3
3
  description: Design, review, and troubleshoot OCI networking with safe compartment/region scoping, least-privilege network access, VCN/subnet/routing/security-list/NSG analysis, and evidence-based MCP or CLI discovery.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: networking
7
10
  ---
8
11
 
9
12
  # OCI Network Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-observability-incident-responder
3
3
  description: Operate as a ruthless OCI observability and incident responder for Monitoring alarms, Logging, Events, Notifications, service health, metrics, runbooks, and IAM-scoped incident response. Use when work touches OCI alarms, telemetry, alert triage, incident evidence, or response permissions.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: observability
7
10
  ---
8
11
 
9
12
  # OCI Observability Incident Responder
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-recovery-service-operator
3
3
  description: Operate OCI Recovery Service protected databases, protection policies, recovery service subnets, backup health, redo status, and recovery metrics. Use for database recovery posture, protected database health, and restore readiness.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: resilience
7
10
  ---
8
11
 
9
12
  # OCI Recovery Service Operator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-registry-artifact-governor
3
3
  description: Govern OCI Registry repositories, container images, artifact access, retention, promotion, and deployment safety. Use for OCIR repository reviews, image lifecycle, DevOps/OKE integration, and least-privilege push/pull access.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: delivery
7
10
  ---
8
11
 
9
12
  # OCI Registry Artifact Governor
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-resource-search-inventory-analyst
3
3
  description: Build OCI resource inventories and dependency maps using Resource Search, compartments, tags, and cross-service discovery. Use for tenancy inventory, ownership gaps, orphan detection, migration scoping, and architecture evidence collection.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Resource Search Inventory Analyst
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-security-compliance-reviewer
3
3
  description: "Review Oracle Cloud Infrastructure security, IAM, network, logging, encryption, and compliance posture. Use when asked to audit OCI policies, compartments, tenancy security, Cloud Guard findings, buckets, vaults, security lists, NSGs, or least-privilege access; prepare compliance evidence; or challenge risky OCI admin assumptions before changes."
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: compliance
7
10
  ---
8
11
 
9
12
  # OCI Security Compliance Reviewer
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-solution-architect
3
3
  description: Design, review, and stress-test Oracle Cloud Infrastructure solution architectures across identity, compartments, networking, compute, database, storage, observability, security, reliability, cost, and operations. Use when asked for OCI landing zones, target architectures, architecture review boards, migration designs, production readiness, or tradeoff decisions.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: platform
7
10
  ---
8
11
 
9
12
  # OCI Solution Architect
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-storage-backup-steward
3
3
  description: Operate as a ruthless OCI storage and backup steward for Object Storage, Block Volume, File Storage, backup policies, retention, replication, lifecycle rules, restore readiness, and IAM-scoped storage operations. Use when work touches OCI storage inventory, backup posture, recovery planning, or storage permissions.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: resilience
7
10
  ---
8
11
 
9
12
  # OCI Storage Backup Steward
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oci-support-incident-coordinator
3
3
  description: Coordinate OCI support incidents with evidence quality, severity discipline, resource scope, timelines, and escalation readiness. Use for support tickets, incident evidence packs, Oracle SR preparation, and post-incident follow-up.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: observability
7
10
  ---
8
11
 
9
12
  # OCI Support Incident Coordinator
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: oracle-oci-mcp-grounded-advisor
3
3
  description: Use this skill when the user asks about Oracle MCP servers, SQLcl MCP, OCI MCP, Oracle Database agent access, OCI automation, or cloud/database advice that must be grounded in official Oracle sources.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: github: Raishin
6
7
  version: 0.1.0
8
+ updated: "2026-05-05"
9
+ category: ai
7
10
  ---
8
11
 
9
12
  # Oracle and OCI MCP Grounded Advisor
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: opentelemetry-collector-config-review
3
3
  description: Use this skill for OpenTelemetry Operator review covering OpenTelemetryCollector deployment modes (Deployment, StatefulSet, DaemonSet, Sidecar), Instrumentation CR auto-instrumentation across Java/Node/Python/.NET/Go, Target Allocator for distributed Prometheus scraping, and pipeline correctness across receivers, processors, and exporters. Trigger when the user asks whether a collector configuration will lose telemetry, whether the right deployment mode is used, whether memory_limiter and batch are present, whether tail_sampling is safe to change, or whether auto-instrumentation will cover a workload after restart.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: observability
7
10
  ---
8
11
 
9
12
  # OpenTelemetry Collector Config Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: prometheus-alerting-cardinality-review
3
3
  description: Use this skill when reviewing Prometheus or AlertManager configuration for cardinality, alerting correctness, scrape security, remote_write safety, or retention adequacy. Trigger when a user provides prometheus.yml, alertmanager.yml, recording rules YAML, alerting rules YAML, or asks whether their Prometheus setup is production-ready.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: observability
7
10
  ---
8
11
 
9
12
  # Prometheus Alerting and Cardinality Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: sigstore-cosign-supply-chain-review
3
3
  description: Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist, whether SBOM attestations are present, whether keyless signing is in use, or whether Rekor transparency log posture is appropriate for private images.
4
+ allowed-tools: Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: security
7
10
  ---
8
11
 
9
12
  # Sigstore Cosign Supply Chain Review
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: terraform-maestro
3
3
  description: Route Terraform and IaC tasks to the right specialist from the cross-cloud IaC catalog. Use when you do not already know the specific IaC specialist needed. Not for direct Terraform answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live apply, destroy, or stack mutation.
4
+ allowed-tools: Agent Skill Read Grep Glob
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: ai
7
10
  ---
8
11
 
9
12
  # Terraform Maestro — Routing Skill
@@ -1,9 +1,12 @@
1
1
  ---
2
2
  name: velero-backup-restore-guard
3
3
  description: Use this skill when guarding Velero backup schedule changes, restore operations, BackupStorageLocation mutations, or volume snapshot configuration. Trigger on any request to run a velero restore, delete a Schedule, change a BSL default, or modify backup retention.
4
+ allowed-tools: Read Grep Glob WebFetch
4
5
  metadata:
5
6
  author: "github: Raishin"
6
7
  version: "0.1.0"
8
+ updated: "2026-05-05"
9
+ category: resilience
7
10
  ---
8
11
 
9
12
  # Velero Backup/Restore Guard