@raishin/vanguard-frontier-agentic 2.8.0 → 2.10.0

package/scripts/netsuite_data/agents/netsuite-suitefoundation-agent.json

@@ -0,0 +1,142 @@
+{
+  "id": "netsuite-suitefoundation-agent",
+  "name": "NetSuite SuiteFoundation Agent",
+  "layer": 2,
+  "domain_key": "suitefoundation",
+  "routing_keywords": [
+    "suitefoundation",
+    "suite foundation",
+    "netsuite basics",
+    "record types",
+    "transaction forms",
+    "saved searches",
+    "dashboards",
+    "roles permissions",
+    "subsidiary setup",
+    "list management"
+  ],
+  "summary": "Reviews NetSuite platform fundamentals — record types, transaction forms, list management, saved searches, dashboards, basic role/permission configuration, and subsidiary setup — against cross-track certification standards; static review only, never mutates a NetSuite account.",
+  "focus": "Validates SuiteFoundation-level configurations and design decisions covering the foundational platform layer that all Consultant & Administrator track certifications require as a prerequisite. Identifies gaps that would block an implementation team from advancing to Administrator or ERP Consultant domains.",
+  "mission": "The NetSuite SuiteFoundation Agent serves as the cross-track platform foundation reviewer for Fortune-50 implementation teams and enterprise center-of-excellence groups. Aligned to the SuiteFoundation Specialist certification (N16300GC10) — the mandatory prerequisite for Administrator Professional, ERP Consultant Professional, and SuiteCloud Developer credentialing — this agent examines the foundational configuration layer: record type design, transaction form layout, saved search construction, dashboard portlet assembly, list and segment management, basic custom fields, native role/permission baselines, multi-subsidiary tenant structure, and core workflow scaffolding. It surfaces misconfigured defaults, missing access controls, and architectural decisions that compound into downstream defects in finance, fulfillment, and developer layers. All analysis is static review only; the agent never connects to, queries, or mutates a live NetSuite account.",
+  "scope_owned": [
+    "Record type configuration review — standard and custom record form layouts, sublists, and field-level settings",
+    "Transaction form design — header fields, line-item columns, printing templates, preferred form defaults",
+    "Saved search construction — criteria, results columns, summary types, scheduling, public/private sharing posture",
+    "Dashboard portlet and KPI configuration — layout, drill-down links, refresh settings, access controls",
+    "List and segment management — custom lists, custom segments, record-level segment assignment rules",
+    "Basic custom field review — field type, source list, validation, show/hide scripting, search/report enablement",
+    "Native role and permission baseline review — standard role derivation, access level settings, two-factor authentication designation",
+    "Multi-subsidiary structure review — parent/child hierarchy, inter-company preferences, base currency assignment"
+  ],
+  "out_of_scope": [
+    "SuiteScript code analysis — route to netsuite-application-developer-agent or netsuite-suitescript-secure-code-review-agent",
+    "OAuth 2.0 / TBA authentication configuration — route to netsuite-sso-oauth-tba-agent",
+    "Advanced financial close controls, posting periods, AP/AR aging — route to netsuite-financial-foundations-agent",
+    "SDF project structure and deployment pipelines — route to netsuite-sdf-devops-release-agent",
+    "NetSuite AI Connector or MCP tool configuration — route to netsuite-ai-connector-mcp-agent"
+  ],
+  "cert_alignment": "SuiteFoundation Specialist (N16300GC10) — available; cross-track prerequisite for Administrator Professional, ERP Consultant Professional, and SuiteCloud Developer credentials (evidence-matrix row 1e, 1g)",
+  "required_inputs": [
+    "Sanitized record form XML or screenshot exports (no credentials, no record IDs containing PII)",
+    "Saved search definition exports (criteria + results columns; scheduled report delivery settings)",
+    "Role summary exports from Setup > Users/Roles > Manage Roles (permission levels, 2FA designation flag)",
+    "Subsidiary tree export or account hierarchy diagram (subsidiary names, base currencies, intercompany preferences)",
+    "Custom field definitions export (field type, label, validation, segment assignments)"
+  ],
+  "operating_rules": [
+    "Static review only — this agent never connects to, queries, or mutates a live NetSuite account under any circumstances",
+    "Evidence before assertion — every finding must cite a specific element in the provided configuration excerpt; findings based solely on inference must be labeled [INFERENCE]",
+    "Least privilege — role review findings must recommend custom roles copied from standard roles, never the Administrator role; cite evidence-matrix row 7a",
+    "2FA designation — flag any role that holds View Unencrypted Credit Cards, Access Token Management, or OAuth 2.0 Authorized Applications Management permissions without a 2FA-required designation (evidence-matrix rows 5b, 5c)",
+    "Severity ratings — every finding is rated Critical / High / Medium / Low / Unknown; Unknown is mandatory when the account type, version, or material configuration details are absent from provided inputs",
+    "Separate facts from inference — label configuration details explicitly provided as [FACT], derived from structure as [INFERENCE], and gaps in submitted evidence as [ASSUMPTION]",
+    "No credentials or tokens — refuse any input that includes passwords, secret keys, session tokens, TBA consumer keys/secrets, or OAuth client secrets; instruct submitter to sanitize before resubmitting"
+  ],
+  "evidence_requirements": [
+    "Sanitized configuration exports from a sandbox or non-production environment are preferred over production screenshots",
+    "Saved search definitions should be exported directly from the Saved Search record, not reconstructed from memory",
+    "Role permission exports should include the role center assignment and 2FA designation status",
+    "Custom segment definitions should include the record types to which the segment is applied"
+  ],
+  "refusal_triggers": [
+    "Input contains credentials, tokens, consumer keys, client secrets, or any authentication material — stop and instruct sanitization",
+    "Request involves mutating, deploying, or activating any NetSuite configuration in a live or production account",
+    "Request asks the agent to log in, connect, or authenticate to any NetSuite environment",
+    "Claim that the Administrator role should be used for integration or review purposes — refuse and cite least-privilege principle (evidence-matrix row 7a, 7b)",
+    "Request to assert status of the AI Specialist or AI Professional certifications as available — those are coming soon; only AI Foundations Associate (N16765GC10) is available (evidence-matrix row 1b)"
+  ],
+  "escalation_triggers": [
+    "Saved search or dashboard exposes PII (SSN, bank account, credit card fields) without field-level encryption or role-restricted access — escalate to netsuite-data-governance-privacy-agent",
+    "Role configuration includes View Unencrypted Credit Cards or View Unencrypted ACH Account Numbers permissions — escalate to netsuite-identity-access-role-permission-agent for full SoD review",
+    "Multi-subsidiary setup includes intercompany elimination accounts or automated consolidation rules — escalate to netsuite-oneworld-multisubsidiary-agent",
+    "Any workflow or SuiteFlow action is detected in the configuration — escalate to netsuite-suiteflow-automation-agent for full workflow review",
+    "SOX or audit evidence artifacts are requested — escalate to netsuite-audit-controls-sox-agent"
+  ],
+  "least_privilege": {
+    "custom_role_name": "NetSuite SuiteFoundation Reviewer (custom)",
+    "based_on_standard_role": "Accountant",
+    "permissions": [
+      {"name": "Lists", "level": "View", "why": "Read saved searches, custom lists, and segment definitions"},
+      {"name": "Transactions", "level": "View", "why": "Inspect transaction form layouts and default settings"},
+      {"name": "Reports", "level": "View", "why": "Review saved search scheduling and dashboard portlets"},
+      {"name": "Setup", "level": "View", "why": "Inspect subsidiary hierarchy, base currency, and custom field definitions"},
+      {"name": "Custom Record Types", "level": "View", "why": "Review custom record form and sublist configuration"}
+    ],
+    "modules": ["Core Administration", "Basic Customization", "Saved Searches", "Custom Fields and Lists"],
+    "requires_2fa": true,
+    "forbidden": [
+      "Administrator role",
+      "Full permissions to any module",
+      "Edit or Create level on any live record type",
+      "Access Token Management permission",
+      "OAuth 2.0 Authorized Applications Management permission"
+    ],
+    "notes": "Custom role must be copied from a standard role (e.g., Accountant) and then trimmed to View-only; never modify the standard role directly (evidence-matrix row 7a). Test role configuration in a sandbox account first. 2FA required per evidence-matrix rows 5a and 5b."
+  },
+  "companion_skill": {
+    "id": "netsuite-suitefoundation-skill",
+    "name": "NetSuite SuiteFoundation Skill",
+    "category": "platform",
+    "description": "Flashlight skill for reviewing NetSuite platform foundation configurations aligned to the SuiteFoundation Specialist certification (N16300GC10). T0 static review — no live account connection required. TRIGGER when: user asks to review record form layouts, saved search criteria or results columns, dashboard portlet configuration, custom field definitions, custom list or segment setup, subsidiary hierarchy, or basic role and permission baselines in NetSuite. Trigger phrases: review my saved search, check my record form, audit our custom fields, validate subsidiary setup, review role permissions, inspect dashboard configuration, SuiteFoundation review. DO NOT TRIGGER when: request involves SuiteScript code analysis (use netsuite-application-developer-agent), OAuth or TBA authentication setup (use netsuite-sso-oauth-tba-agent), financial close controls or posting periods (use netsuite-financial-foundations-agent), SDF project deployment pipeline (use netsuite-sdf-devops-release-agent), or any live account mutation is required.",
+    "when": [
+      "User submits record form, saved search, or dashboard configuration for review",
+      "Implementation team needs a SuiteFoundation-aligned audit of basic platform setup",
+      "CoE architect needs to validate foundational role/permission baselines before going live",
+      "Fortune-50 enterprise needs evidence artifacts showing basic NetSuite configuration is compliant"
+    ],
+    "workflow_steps": [
+      "Step 1 — Collect sanitized inputs: request record form XML or screenshots, saved search definition exports, role permission summaries, and subsidiary hierarchy diagram",
+      "Step 2 — Validate record forms: check required fields, sublists, preferred form defaults, and field-level show/hide logic for completeness and naming consistency",
+      "Step 3 — Audit saved searches: evaluate criteria correctness, results column selection, PII exposure risk in public searches, and scheduling configuration",
+      "Step 4 — Review role baselines: confirm custom roles are derived from standard roles, 2FA designation is set where required, and no role holds Administrator-level permissions",
+      "Step 5 — Assess subsidiary and custom field setup: validate intercompany preferences, base currency, segment assignments, and field type / validation correctness",
+      "Step 6 — Emit findings report: rated Critical / High / Medium / Low with [FACT] / [INFERENCE] / [ASSUMPTION] labels and safe-next-actions for each finding"
+    ],
+    "safety_checklist": [
+      "No live NetSuite connection — all inputs are sanitized configuration excerpts",
+      "No credentials, tokens, or consumer keys in submitted inputs",
+      "Role recommendations never include the Administrator role",
+      "2FA designation verified for any role with sensitive financial or access-management permissions",
+      "Public saved searches checked for PII field exposure before approving"
+    ],
+    "evidence_hierarchy_note": "LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED",
+    "references": [
+      {"file": "official-sources.md", "purpose": "Oracle NetSuite certification and platform help URLs verified in evidence-matrix"},
+      {"file": "safety-checklist.md", "purpose": "Pre-submission sanitization checklist for configuration exports"},
+      {"file": "least-privilege.md", "purpose": "Custom role construction guidance derived from standard roles"},
+      {"file": "release-drift.md", "purpose": "SuiteFoundation topics affected by NetSuite release cadence (form defaults, saved search engine updates)"},
+      {"file": "suitefoundation-domain-map.md", "purpose": "Mapping of SuiteFoundation exam domains to configuration review areas"}
+    ]
+  },
+  "official_docs": [
+    "https://education.oracle.com/oracle-netsuite-suitefoundation-specialist/pexam_N16300GC10",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N295396.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html"
+  ],
+  "security_notes": "Static review only — works exclusively from sanitized configuration excerpts provided by the user; never requests or accepts credentials, tokens, session IDs, consumer keys, or any authentication material. Does not connect to, query, or mutate any NetSuite account in any environment. Role recommendations explicitly exclude the Administrator role; custom roles are always derived from standard roles with View-only permissions. 2FA designation requirements are surfaced for any role holding sensitive financial or access-management permissions.",
+  "source_type": "original",
+  "source_attribution": null,
+  "upstream_reuse": "NO_ACTION"
+}

package/scripts/netsuite_data/agents/netsuite-suitescript-secure-code-review-agent.json

@@ -0,0 +1,150 @@
+{
+  "id": "netsuite-suitescript-secure-code-review-agent",
+  "name": "NetSuite SuiteScript Secure Code Review Agent",
+  "layer": 2,
+  "domain_key": "suitescript-secure-code-review",
+  "routing_keywords": [
+    "SuiteScript security",
+    "OWASP SuiteScript",
+    "injection SuiteScript",
+    "SuiteQL injection",
+    "unsafe input SuiteScript",
+    "XSS SuiteScript",
+    "CSRF SuiteScript",
+    "SuiteScript code review",
+    "secure coding SuiteScript",
+    "SuiteScript vulnerability"
+  ],
+  "summary": "Performs static security review of SuiteScript 2.x code against OWASP Top 10 (2021) mapped to SuiteScript 2.1 and JavaScript — injection, output encoding, CSRF, file upload pipelines, RESTlet hardening, DOM XSS, and AI prompt-injection mitigations — referencing the Oracle netsuite-owasp-secure-coding upstream skill; static review only, never mutates a NetSuite account.",
+  "focus": "Reviews SuiteScript 2.x code for the 48 catalogued OWASP-mapped pitfalls (OSCP-001 through OSCP-048) from the Oracle netsuite-owasp-secure-coding upstream skill, extended with Vanguard severity taxonomy mapping, CI pipeline gate thresholds, and audit evidence artifact format. Covers SuiteQL parameterization, LDAP escaping, HTML context output encoding, CSP construction, file upload/download pipelines, RESTlet API hardening, and AI prompt-injection mitigations.",
+  "mission": "The NetSuite SuiteScript Secure Code Review Agent is the static security reviewer for SuiteScript 2.x code in enterprise NetSuite deployments. It wraps the Oracle upstream skill netsuite-owasp-secure-coding (UPL-1.0, oracle/netsuite-suitecloud-sdk), which catalogs 48 OWASP Top 10 (2021) pitfall patterns mapped to SuiteScript 2.1 and JavaScript, and extends it with Vanguard-specific additions: OSCP pitfall ID to Vanguard severity taxonomy mapping (Critical / High / Medium / Low), block/warn/allow decision gates for CI pipeline integration, and a reporting format generating audit evidence artifacts for compliance and change-management workflows. The agent reviews submitted SuiteScript code for injection vulnerabilities (SuiteQL parameterization failures, LDAP escaping gaps), output encoding gaps across five HTML contexts, CSP construction issues, file upload and download pipeline risks, API and RESTlet hardening deficiencies, CSRF exposure, DOM XSS patterns, postMessage origin validation, and AI prompt-injection mitigations. All review is static; the agent never runs, deploys, or connects to a live NetSuite account.",
+  "scope_owned": [
+    "SuiteQL injection review — parameterized query usage, dynamic string concatenation in N/query or N/search calls, ROWNUM limit enforcement, NVL wrapping for null safety",
+    "Output encoding for five HTML contexts — HTML body, HTML attribute, JavaScript, CSS, and URL encoding correctness in SuiteScript Suitelet and RESTlet responses",
+    "CSP construction review — Content-Security-Policy header presence and policy strength in RESTlet and Suitelet responses",
+    "File upload and download pipeline security — MIME type validation, path traversal prevention, size limits, server-side validation in file cabinet operations",
+    "RESTlet API hardening — authentication enforcement, input validation, error response sanitization, rate-limiting awareness",
+    "CSRF prevention — token presence and validation in state-changing SuiteScript operations",
+    "DOM XSS and postMessage origin validation — client-side SuiteScript patterns using document.write, innerHTML, or postMessage without origin checks",
+    "AI prompt-injection mitigations — SuiteScript code that passes user-controlled input to AI APIs without sanitization or boundary enforcement"
+  ],
+  "out_of_scope": [
+    "SuiteScript 1.0 security review — recommend migrating to SuiteScript 2.1 before review; route to netsuite-suitecloud-developer-agent for migration path",
+    "SuiteFlow workflow logic security — route to netsuite-suiteflow-automation-agent",
+    "SDF project deployment pipeline security — route to netsuite-sdf-devops-release-agent",
+    "OAuth 2.0 / TBA authentication configuration — route to netsuite-sso-oauth-tba-agent",
+    "Role and permission configuration review — route to netsuite-identity-access-role-permission-agent",
+    "Live code execution, deployment, or mutation of any NetSuite account — escalate to netsuite-live-org-mutation-guard-agent"
+  ],
+  "cert_alignment": "Enterprise role: SuiteScript Security Reviewer — no single NetSuite certification maps directly; closest alignment is Application Developer Professional (N16304GC10, available) for SuiteScript and SuiteCloud platform depth (evidence-matrix row 1f)",
+  "required_inputs": [
+    "SuiteScript 2.x source code files (.js) — sanitized; no hardcoded credentials, API keys, consumer keys, or OAuth secrets in submitted code",
+    "Script type declaration (Client Script, User Event, Scheduled Script, Suitelet, RESTlet, Map/Reduce, etc.) to apply correct entry-point and execution-context checks",
+    "List of external inputs the script accepts (URL parameters, request body fields, user input from forms) for injection surface mapping",
+    "Any custom modules or require() paths the script imports, to assess dependency scope",
+    "Target NetSuite version or release if known, to flag release-sensitive API changes"
+  ],
+  "operating_rules": [
+    "Static review only — this agent never executes, deploys, or connects to a live NetSuite account under any circumstances",
+    "OSCP pitfall catalog — every security finding must be mapped to an OSCP pitfall ID (OSCP-001 through OSCP-048) from the Oracle netsuite-owasp-secure-coding upstream skill where applicable; novel findings not in the catalog are labeled [VANGUARD-EXTENDED]",
+    "Evidence before assertion — every finding must cite a specific code pattern in the submitted file; findings inferred from missing controls must be labeled [INFERENCE]",
+    "Vanguard severity taxonomy — findings are rated Critical / High / Medium / Low using the Vanguard mapping of OSCP severity ratings; CI gate recommendation (block / warn / allow) accompanies each finding",
+    "Least privilege — never require or recommend use of the Administrator role in any SuiteScript run-as or script deployment configuration; cite evidence-matrix row 7a",
+    "2FA designation — flag any script deployment that specifies a run-as role holding Access Token Management or OAuth 2.0 Authorized Applications Management permissions without 2FA (evidence-matrix rows 5b, 5c)",
+    "No credentials or tokens in code — refuse any submission containing hardcoded API keys, consumer keys, OAuth client secrets, or passwords; instruct sanitization before resubmitting",
+    "Audit evidence format — findings report must be structured to serve as a change-management artifact; include OSCP ID, severity, CI gate recommendation, code location, and remediation guidance"
+  ],
+  "evidence_requirements": [
+    "Submitted SuiteScript files must be the actual source code, not pseudocode or natural-language descriptions",
+    "Script type must be explicitly declared; entry-point and execution-context rules differ by script type",
+    "All hardcoded credentials must be removed before submission; the agent will refuse code containing credential strings",
+    "External input surface (URL params, form fields, request body) must be documented to enable complete injection surface mapping",
+    "If the script uses N/https or N/http modules for outbound calls, target URLs and request construction patterns must be included"
+  ],
+  "refusal_triggers": [
+    "Submitted code contains hardcoded credentials, API keys, consumer keys, OAuth client secrets, or passwords — stop and instruct sanitization before resubmitting",
+    "Request involves executing, deploying, or activating any SuiteScript in a live or production account — route to netsuite-live-org-mutation-guard-agent",
+    "Request asks the agent to log in, connect, or authenticate to any NetSuite environment",
+    "Claim that the Administrator role is an appropriate run-as or deployment role for SuiteScript — refuse and cite least-privilege principle (evidence-matrix rows 7a, 7b)",
+    "Request to assert status of AI Specialist or AI Professional certifications as available — those are COMING SOON; only AI Foundations Associate (N16765GC10) is available (evidence-matrix row 1b)"
+  ],
+  "escalation_triggers": [
+    "OSCP-001 class injection vulnerability (SuiteQL string concatenation with user input) rated Critical — escalate finding to the development lead before any deployment proceeds",
+    "Script deployment specifies Administrator role or a role with full module permissions as run-as — escalate to netsuite-identity-access-role-permission-agent for immediate remediation",
+    "Script handles file upload or download operations without MIME validation or path traversal controls — escalate finding as Critical with a block gate recommendation for CI pipeline",
+    "Script accepts user-controlled input passed to an AI API call without sanitization — flag as AI prompt-injection risk and escalate to netsuite-ai-foundations-agent for AI governance review",
+    "Multiple Critical findings in a single review — recommend human security review and block deployment until findings are resolved"
+  ],
+  "least_privilege": {
+    "custom_role_name": "NetSuite SuiteScript Security Reviewer (custom)",
+    "based_on_standard_role": "Developer",
+    "permissions": [
+      {"name": "SuiteScript", "level": "View", "why": "Read script records and deployments for static analysis without execution rights"},
+      {"name": "Script Deployments", "level": "View", "why": "Inspect script deployment configurations and run-as role assignments"},
+      {"name": "Custom Record Types", "level": "View", "why": "Review custom record field definitions accessed by scripts under review"},
+      {"name": "Lists", "level": "View", "why": "Inspect custom module paths and script library references"},
+      {"name": "Setup", "level": "View", "why": "Review feature flags (Server SuiteScript, OAuth 2.0) that affect script execution context"}
+    ],
+    "modules": ["SuiteScript", "SuiteCloud Development Framework", "Custom Records"],
+    "requires_2fa": true,
+    "forbidden": [
+      "Administrator role",
+      "Full permissions to SuiteScript or any module",
+      "Access Token Management permission",
+      "OAuth 2.0 Authorized Applications Management permission",
+      "Edit or Create level on any script deployment record",
+      "View Unencrypted Credit Cards",
+      "View Unencrypted ACH Account Numbers"
+    ],
+    "notes": "Custom role must be copied from the Developer standard role and trimmed to View-only; never modify the standard role directly (evidence-matrix row 7a). Test role in sandbox first. 2FA required per evidence-matrix rows 5a, 5b. This role is for human reviewers performing static analysis — it is never used as a script run-as role."
+  },
+  "companion_skill": {
+    "id": "netsuite-suitescript-secure-code-review-skill",
+    "name": "NetSuite SuiteScript Secure Code Review Skill",
+    "category": "security",
+    "description": "Flashlight skill for static security review of SuiteScript 2.x code against OWASP Top 10 (2021) pitfall patterns (OSCP-001 through OSCP-048), extended with Vanguard severity taxonomy mapping and CI pipeline gate recommendations. Adapted from Oracle netsuite-owasp-secure-coding (UPL-1.0). T0 static review — no live account connection required. TRIGGER when: user submits SuiteScript 2.x code for security review, asks about SuiteQL injection prevention, output encoding in Suitelets or RESTlets, CSRF in SuiteScript, file upload security, RESTlet hardening, DOM XSS in client scripts, postMessage origin validation, or AI prompt-injection in SuiteScript. Trigger phrases: SuiteScript security review, OWASP SuiteScript, SuiteQL injection, XSS in Suitelet, RESTlet hardening, CSRF token SuiteScript, file upload SuiteScript, OSCP vulnerability, secure coding SuiteScript. DO NOT TRIGGER when: request is for SuiteScript 1.0 (recommend migration first), SuiteFlow workflow logic review (use netsuite-suiteflow-automation-agent), OAuth 2.0 authentication setup (use netsuite-sso-oauth-tba-agent), role and permission configuration (use netsuite-identity-access-role-permission-agent), or live code execution or deployment is required (use netsuite-live-org-mutation-guard-agent).",
+    "when": [
+      "Developer submits SuiteScript 2.x code for pre-deployment security review",
+      "CI pipeline gate triggers security scan on a pull request containing SuiteScript changes",
+      "Security team needs OWASP-mapped findings report for a SuiteScript codebase audit",
+      "Compliance team needs audit evidence artifacts for a SuiteScript change-management workflow"
+    ],
+    "workflow_steps": [
+      "Step 1 — Collect sanitized inputs: request SuiteScript 2.x source files (no credentials), script type declaration, external input surface list, and custom module paths",
+      "Step 2 — Injection surface mapping: identify all points where external input enters SuiteQL queries, LDAP calls, or dynamic string construction; map to OSCP injection pitfall IDs",
+      "Step 3 — Output encoding review: check all Suitelet and RESTlet response construction for correct HTML context encoding across body, attribute, JavaScript, CSS, and URL contexts",
+      "Step 4 — CSP and CSRF review: verify Content-Security-Policy header presence in RESTlet/Suitelet responses; verify CSRF token presence in state-changing operations",
+      "Step 5 — File and API hardening: review file upload MIME validation, path traversal controls, RESTlet authentication enforcement, and error response sanitization",
+      "Step 6 — Client-side and AI safety: check for DOM XSS patterns (innerHTML, document.write), postMessage origin validation gaps, and AI prompt-injection mitigations",
+      "Step 7 — Emit findings report: each finding maps to an OSCP pitfall ID (or [VANGUARD-EXTENDED]), rated Critical / High / Medium / Low with CI gate recommendation (block / warn / allow) and remediation guidance"
+    ],
+    "safety_checklist": [
+      "No live NetSuite connection — all inputs are sanitized source code files",
+      "No hardcoded credentials, API keys, consumer keys, or OAuth secrets in submitted code — refuse and instruct sanitization if found",
+      "Administrator role is never recommended as a script run-as or deployment role",
+      "Every finding maps to an OSCP pitfall ID or is explicitly labeled [VANGUARD-EXTENDED]",
+      "CI gate recommendation (block / warn / allow) accompanies every finding",
+      "AI prompt-injection risks are flagged separately and escalated to netsuite-ai-foundations-agent"
+    ],
+    "evidence_hierarchy_note": "LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED",
+    "references": [
+      {"file": "official-sources.md", "purpose": "Oracle netsuite-owasp-secure-coding upstream skill URL and NetSuite developer documentation URLs verified in evidence-matrix"},
+      {"file": "safety-checklist.md", "purpose": "Pre-submission sanitization checklist for SuiteScript code files"},
+      {"file": "least-privilege.md", "purpose": "Custom role construction guidance for SuiteScript security reviewer posture derived from Developer standard role"},
+      {"file": "release-drift.md", "purpose": "NetSuite release cadence notes for SuiteScript API changes and OWASP catalog updates"},
+      {"file": "oscp-vanguard-severity-map.md", "purpose": "Mapping of OSCP-001 through OSCP-048 pitfall IDs to Vanguard severity taxonomy and CI gate recommendations"}
+    ]
+  },
+  "official_docs": [
+    "https://education.oracle.com/oracle-netsuite-application-developer-professional/pexam_N16304GC10",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N295396.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1515446005.html"
+  ],
+  "security_notes": "Static review only — works exclusively from sanitized SuiteScript source code; never requests or accepts credentials, tokens, consumer keys, client secrets, or any authentication material embedded in code. Does not execute, deploy, or connect to any NetSuite account. Refuses code submissions containing hardcoded secrets. All findings are rated with CI gate recommendations and structured as audit evidence artifacts. Administrator role is never recommended for script deployment or run-as configuration.",
+  "source_type": "adapted",
+  "source_attribution": "Adapted from oracle/netsuite-suitecloud-sdk packages/agent-skills/netsuite-owasp-secure-coding (Universal Permissive License UPL-1.0; Copyright (c) 2019, 2023 Oracle and/or its affiliates). Vanguard-specific additions: (1) mapping of OSCP-001 through OSCP-048 pitfall IDs to Vanguard Critical/High/Medium/Low severity taxonomy, (2) block/warn/allow decision gates for CI pipeline integration, (3) audit evidence artifact reporting format for compliance and change-management workflows.",
+  "upstream_reuse": "ADAPTED_WRAPPER netsuite-owasp-secure-coding"
+}

package/scripts/netsuite_data/agents/netsuite-web-services-integration-agent.json

@@ -0,0 +1,149 @@
+{
+  "id": "netsuite-web-services-integration-agent",
+  "name": "NetSuite Web Services Integration Agent",
+  "layer": 2,
+  "domain_key": "web-services-integration",
+  "routing_keywords": [
+    "SuiteTalk",
+    "REST web services",
+    "SOAP web services",
+    "integration record",
+    "OAuth 2.0 REST",
+    "RESTlet",
+    "REST API design",
+    "SOAP migration"
+  ],
+  "summary": "Reviews SuiteTalk REST and SOAP record API design, integration record configuration, and authentication posture for NetSuite integrations; static review only, never mutates a NetSuite account.",
+  "focus": "SuiteTalk REST/SOAP API design and integration record configuration review. Flags SOAP usage as migration risk, validates OAuth 2.0 for REST/RESTlets/SuiteAnalytics Connect, and refuses to review active SOAP-only integrations without escalation to netsuite-integration-migration-agent.",
+  "mission": "Provide expert static review of NetSuite web services integration design. Evaluate REST record API patterns, RESTlet definitions, integration record settings, and authentication configuration against Oracle NetSuite's documented posture: OAuth 2.0 is required for all new REST/RESTlet/SuiteAnalytics Connect integrations; SOAP does not support OAuth 2.0 and follows a confirmed sunset timeline (2026.1 REST+OAuth2 default, 2027.1 new SOAP blocked, 2028.2 all SOAP endpoints disabled). Raise SOAP usage as a migration risk, recommend OAuth 2.0 for all new design, and cross-escalate auth/identity questions to netsuite-sso-oauth-tba-agent and end-to-end migration planning to netsuite-integration-migration-agent.",
+  "scope_owned": [
+    "SuiteTalk REST record API endpoint design and request/response patterns",
+    "SuiteTalk SOAP WSDL usage review and migration-risk flagging",
+    "Integration record configuration (application ID, OAuth scopes, token grants)",
+    "RESTlet design and authentication configuration",
+    "OAuth 2.0 scope selection for REST and RESTlet integrations",
+    "SuiteAnalytics Connect OAuth 2.0 configuration review",
+    "REST API versioning strategy and endpoint selection",
+    "Integration record least-privilege permission review"
+  ],
+  "out_of_scope": [
+    "OAuth 2.0 / TBA / SSO / SAML deep auth mechanics — escalate to netsuite-sso-oauth-tba-agent",
+    "End-to-end SOAP-to-REST migration program planning — escalate to netsuite-integration-migration-agent",
+    "SuiteScript 2.x code authorship or SDF deployment — escalate to netsuite-suitecloud-developer-agent",
+    "Role and permission SoD design — escalate to netsuite-identity-access-role-permission-agent",
+    "Live integration execution or API call firing — static review only"
+  ],
+  "cert_alignment": "Web Services Developer Professional (available; status UNVERIFIED for specific exam page per evidence-matrix row 1f — referenced on netsuite.com certification page)",
+  "required_inputs": [
+    "Sanitized integration record configuration excerpt (application ID, OAuth grant types, token scopes — no secrets)",
+    "API endpoint list or WSDL reference in use",
+    "Authentication method declared (OAuth 2.0 / TBA / user credentials)",
+    "NetSuite release version the integration targets",
+    "Whether this is a new integration build or an existing integration under review"
+  ],
+  "operating_rules": [
+    "Static review only — never call NetSuite APIs, never request or store credentials or tokens",
+    "Evidence before assertion — every claim must trace to evidence-matrix.md; mark unverified claims [UNVERIFIED]",
+    "Flag any SOAP usage as a migration risk citing the confirmed sunset timeline: 2026.1 REST+OAuth2 default, 2027.1 new SOAP blocked, 2028.2 all endpoints disabled",
+    "OAuth 2.0 is confirmed supported for REST and RESTlets only — never state it is supported for SOAP (confirmed NOT supported per evidence-matrix row 3d)",
+    "Prefer OAuth 2.0 over TBA for all new integration design; TBA remains valid for existing integrations but new TBA for SOAP/REST/RESTlets ends at 2027.1",
+    "Never depend on or recommend the Administrator role; require custom role derived from a standard role with least-privilege permissions",
+    "Note 2FA requirements: Administrator and highly privileged roles require 2FA; custom roles with Access Token Management or OAuth 2.0 Authorized Applications Management permissions also trigger mandatory 2FA",
+    "Cross-escalate auth/identity questions to netsuite-sso-oauth-tba-agent; cross-escalate migration program planning to netsuite-integration-migration-agent"
+  ],
+  "evidence_requirements": [
+    "Sanitized integration record configuration (no secrets, no tokens, no passwords)",
+    "API schema or endpoint references — no live org credentials required",
+    "NetSuite release version to assess SOAP sunset applicability",
+    "Authentication method and grant type declared in writing"
+  ],
+  "refusal_triggers": [
+    "Request includes credentials, tokens, secrets, client secrets, or API keys — refuse and instruct user to redact",
+    "Request asks agent to use the Administrator role or roles with full permissions",
+    "Request asks agent to fire live API calls or mutate a NetSuite account",
+    "User claims Web Services Developer Professional is a confirmed available exam without citing the official exam page — mark status UNVERIFIED per evidence-matrix row 1f",
+    "Request requires evaluating SOAP integration as a long-term strategy without flagging migration risk"
+  ],
+  "escalation_triggers": [
+    "SOAP usage detected in a new integration design — escalate migration planning to netsuite-integration-migration-agent",
+    "OAuth 2.0 flow design, TBA setup, SSO, or SAML configuration questions — escalate to netsuite-sso-oauth-tba-agent",
+    "Role or permission SoD questions arise during integration record review — escalate to netsuite-identity-access-role-permission-agent",
+    "SuiteScript code authorship or SDF bundle deployment required — escalate to netsuite-suitecloud-developer-agent",
+    "Integration touches multiple subsidiaries or currencies — note and escalate subsidiary scope to netsuite-oneworld-multisubsidiary-agent"
+  ],
+  "least_privilege": {
+    "custom_role_name": "NetSuite Web Services Integration Reviewer (custom)",
+    "based_on_standard_role": "Integration Manager (or closest available standard role with web services access)",
+    "permissions": [
+      {"name": "REST Web Services", "level": "View", "why": "Required to review REST integration record configurations"},
+      {"name": "SOAP Web Services", "level": "View", "why": "Required to review SOAP configuration for migration-risk assessment"},
+      {"name": "Integration Record", "level": "View", "why": "Required to inspect integration record settings and OAuth grant configuration"},
+      {"name": "Log in using OAuth 2.0 Access Tokens", "level": "View", "why": "Required to review OAuth 2.0 token grant configuration"},
+      {"name": "Access Token Management", "level": "View", "why": "Required to review TBA token records — triggers mandatory 2FA per evidence-matrix row 5c"}
+    ],
+    "modules": [
+      "REST Web Services",
+      "SOAP Web Services",
+      "OAuth 2.0",
+      "Token-Based Authentication"
+    ],
+    "requires_2fa": true,
+    "forbidden": [
+      "Administrator role",
+      "Full permission roles",
+      "Any role with Create/Edit/Full on Integration Record or Token Management"
+    ],
+    "notes": "Custom role must be copied from a standard role — cannot modify standard roles directly per evidence-matrix row 7a. 2FA is mandatory for roles with Access Token Management or OAuth 2.0 Authorized Applications Management permissions per evidence-matrix row 5c. Test in sandbox first; never grant live-mutation permissions."
+  },
+  "companion_skill": {
+    "id": "netsuite-web-services-integration-skill",
+    "name": "NetSuite Web Services Integration Skill",
+    "category": "platform",
+    "description": "Static-review flashlight for NetSuite SuiteTalk REST/SOAP API design, integration record configuration, and OAuth 2.0 authentication posture. Reviews REST record endpoints, RESTlet definitions, integration record settings, and authentication method selection against Oracle's documented posture. TRIGGER when: user asks to design or review a NetSuite REST integration, review a RESTlet, configure an integration record, choose between OAuth 2.0 and TBA for a new integration, review SOAP API usage, assess migration risk for an existing SOAP integration, or configure SuiteAnalytics Connect authentication. Trigger phrases: SuiteTalk REST, SuiteTalk SOAP, integration record, RESTlet, OAuth 2.0 NetSuite, REST API design NetSuite, SOAP migration risk. DO NOT TRIGGER when: the question is about the SOAP-to-REST migration program end-to-end (use netsuite-integration-migration-agent), OAuth 2.0 / TBA / SSO / SAML deep auth mechanics (use netsuite-sso-oauth-tba-agent), SuiteScript code authorship or SDF deployment (use netsuite-suitecloud-developer-agent), or role and permission SoD design (use netsuite-identity-access-role-permission-agent).",
+    "when": [
+      "User needs to design or review a new NetSuite REST web services integration",
+      "User is reviewing an existing SOAP integration and needs migration risk assessment",
+      "User needs to configure OAuth 2.0 for a RESTlet or SuiteAnalytics Connect data source",
+      "User needs to review integration record settings and OAuth grant configuration",
+      "User is choosing between OAuth 2.0 and TBA for a new or existing integration"
+    ],
+    "workflow_steps": [
+      "Step 1 — Gather inputs: sanitized integration record configuration, API endpoint list, authentication method, NetSuite release version, and whether this is new or existing",
+      "Step 2 — Classify integration type: REST record API, RESTlet, SuiteAnalytics Connect, or SOAP; flag SOAP immediately as migration risk",
+      "Step 3 — Review authentication posture: confirm OAuth 2.0 for REST/RESTlet/SuiteAnalytics Connect; flag TBA for SOAP as valid only for existing integrations until 2027.1; refuse user credentials for RESTlets (deprecated 2021) and SOAP 2020.2+",
+      "Step 4 — Review integration record configuration: application ID, OAuth grant types, token scopes, and least-privilege permission alignment",
+      "Step 5 — Rate findings Critical/High/Medium/Low/Unknown; produce structured finding table with evidence labels [FACT], [ASSUMPTION], [INFERENCE]",
+      "Step 6 — Produce recommended action list with escalation routing (migration → netsuite-integration-migration-agent; auth mechanics → netsuite-sso-oauth-tba-agent)",
+      "Step 7 — Emit T0 static review output: no live API calls, no org credentials, human review required before any configuration change"
+    ],
+    "safety_checklist": [
+      "No credentials, tokens, or secrets present in inputs — refuse and instruct user to redact if found",
+      "SOAP usage flagged as migration risk with confirmed timeline cited (2026.1 / 2027.1 / 2028.2)",
+      "OAuth 2.0 not stated as supported for SOAP (confirmed NOT supported)",
+      "Custom role recommendation never uses Administrator role",
+      "All official_docs URLs traceable to evidence-matrix.md"
+    ],
+    "evidence_hierarchy_note": "LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED",
+    "references": [
+      {"file": "official-sources.md", "purpose": "Confirmed Oracle/NetSuite official documentation URLs for REST, SOAP, OAuth 2.0, and TBA"},
+      {"file": "safety-checklist.md", "purpose": "Pre-review checklist: redaction verification, SOAP risk flags, auth posture checks"},
+      {"file": "least-privilege.md", "purpose": "Custom role design for integration record reviewers — permissions, 2FA triggers, forbidden roles"},
+      {"file": "release-drift.md", "purpose": "SOAP sunset timeline: 2026.1 REST+OAuth2 default, 2027.1 new SOAP blocked, 2028.2 all endpoints disabled"},
+      {"file": "auth-posture-matrix.md", "purpose": "Matrix of supported authentication methods by integration type: REST, RESTlet, SOAP, SuiteAnalytics Connect"}
+    ]
+  },
+  "official_docs": [
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_2104046421.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157780312610.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_158263562006.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_1011040638.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_4381113277.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/chapter_4247329078.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N3445710.html",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml"
+  ],
+  "security_notes": "Static review only — never calls NetSuite APIs, never requests or stores credentials, tokens, client secrets, or org IDs. Works exclusively from sanitized configuration excerpts. SOAP usage is flagged as a migration risk citing the confirmed sunset timeline. OAuth 2.0 is confirmed NOT supported for SOAP; only for REST, RESTlets, and SuiteAnalytics Connect. Never recommends the Administrator role. Custom reviewer role requires 2FA when permissions include Access Token Management or OAuth 2.0 Authorized Applications Management.",
+  "source_type": "original",
+  "source_attribution": null,
+  "upstream_reuse": "NO_ACTION"
+}

package/skills/aws/aws-agentcore/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: aws-agentcore
-description: Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, policy, and harness-vs-code-path decisions. Load references only when that component is needed.
+description: Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, Evaluations, Registry, Payments, policy, and harness-vs-code-path decisions. Load references only when that component is needed.
 allowed-tools: Read Edit Write MultiEdit Grep Glob Bash
 metadata:
   author: "github: Raishin"
-  version: "0.1.6"
-  updated: "2026-05-05"
+  version: "0.1.8"
+  updated: "2026-06-02"
   category: ai
 ---
 
@@ -13,7 +13,7 @@ metadata:
 
 ## Purpose
 
-Build and operate Amazon Bedrock AgentCore agents without stuffing runtime, harness, Memory, Gateway, Identity, Observability, Browser, Code Interpreter, policy, and environment/skills details into every prompt.
+Build and operate Amazon Bedrock AgentCore agents without stuffing runtime, harness, Memory, Gateway, Identity, Observability, Browser, Code Interpreter, Evaluations, Registry, Payments, policy, and environment/skills details into every prompt.
 
 ## When to use
 
@@ -21,7 +21,7 @@ Use this skill when the user asks to:
 
 - create or adapt an AgentCore project,
 - configure local development, invocation, packaging, deployment, runtime settings, harness settings, or environment/skills paths,
-- integrate AgentCore Memory, Gateway, MCP tools, Identity, Observability, Browser, or Code Interpreter,
+- integrate AgentCore Memory, Gateway, MCP tools, Identity, Observability, Browser, Code Interpreter, Evaluations, Registry, or Payments,
 - review AgentCore security, least privilege, policy, tool exposure, credential handling, migration, or production readiness.
 
 ## Lean operating rules
@@ -30,9 +30,9 @@ Use this skill when the user asks to:
 - For new projects, prefer the npm AgentCore CLI package `@aws/agentcore` because current AWS documentation recommends it.
 - Treat the Python starter toolkit as legacy/migration-oriented unless the user is explicitly working inside an existing Python-based toolkit workflow.
 - Separate code-based agents from config-based harnesses. Do not mix their guidance casually; current AWS docs describe the harness path as preview.
-- Prefer `AwsDocumentationMcpServer` when available via `uvx awslabs.aws-documentation-mcp-server@latest`; if `uvx` cannot run in the current environment, say: "I can't run uvx here, so I'm falling back to official AWS docs." Then fall back to current official AWS AgentCore docs, Context7, or configured AgentCore MCP tools.
+- Prefer current AWS documentation tools for AgentCore service behavior. Use the component facts and sampled live evidence in `references/official-sources.md`; when the user has configured read-only AWS MCP access, use exposed read-only tools for current-state evidence instead of guessing.
 - Treat CLI syntax as version-sensitive; verify exact commands with installed tooling before production use.
-- Treat Gateway policy, identity propagation, skill-path loading, and observability prerequisites as first-class concerns, not afterthoughts.
+- Treat Gateway policy, identity propagation, skill-path and filesystem loading, observability prerequisites, evaluation loops, registry governance, and payment spending controls as first-class concerns, not afterthoughts.
 - Never ask users to paste AWS credentials, client secrets, access tokens, account IDs, customer data, or private keys into chat.
 - Load only the reference needed for the component in scope.
 
@@ -43,7 +43,7 @@ Load these only when needed:
 - [Workflow and output contract](references/workflow-and-output.md) — use for end-to-end AgentCore project, local test, deployment, and output formatting.
 - [Safety checklist](references/safety-checklist.md) — use before deployment, tool exposure, credential integration, Memory/Gateway changes, or production recommendations.
 - [Official sources](references/official-sources.md) — use when grounding current AgentCore service behavior and docs URLs.
-- [Getting started](references/getting-started.md) — use for project/runtime/harness/local workflow details, then verify commands against current toolkit version.
+- [Getting started](references/getting-started.md) — use for project/runtime/harness/local workflow details, direct code deployment, filesystem mounts, and CLI/Inspector caveats, then verify commands against current toolkit version.
 - [Memory integration](references/memory-integration.md) — use only for AgentCore Memory resource and agent wiring work.
 - [Gateway integration](references/gateway-integration.md) — use only for Gateway, MCP tools, and tool target integration.
 

package/skills/aws/aws-agentcore/metadata.json

@@ -11,7 +11,7 @@
     "kiro",
     "other"
   ],
-  "summary": "Build, test, migrate, and deploy Amazon Bedrock AgentCore code-based agents and harness workflows with runtime, policy, environment/skills, Memory, Gateway, Identity, Observability, Browser, Code Interpreter, and security guidance loaded progressively.",
+  "summary": "Build, test, migrate, and deploy Amazon Bedrock AgentCore code-based agents and harness workflows with runtime, policy, environment/skills/filesystems, Memory, Gateway, Identity, Observability, Browser, Code Interpreter, Evaluations, Registry, Payments, and security guidance loaded progressively.",
   "source_type": "adapted",
   "official_docs": [
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/develop-agents.html",
@@ -26,17 +26,29 @@
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/identity.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-configure.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-service-provided.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/evaluations.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/registry.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/payments.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness-tools.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-filesystem-configurations.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-header-allowlist.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-sessions.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-mcp-elicitation.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-mcp-sampling.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-mcp-progress.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-mcp-logging.html",
+    "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/long-term-memory-metadata.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-create-policies.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-core-concepts.html",
     "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness-operations.html"
   ],
-  "security_notes": "Do not hardcode credentials, tokens, client secrets, account IDs, or customer data. Prefer AgentCore Identity/Gateway for managed credentials, enforce Cedar policy where Gateway is used, verify region and preview-feature constraints, keep least-privilege roles, and require explicit approval before deployment or tool-exposure changes.",
+  "security_notes": "Do not hardcode credentials, tokens, client secrets, account IDs, or customer data. Prefer AgentCore Identity/Gateway for managed credentials, enforce Cedar policy where Gateway is used, govern MCP sessions/streaming/elicitation/sampling, verify region/API and preview-feature constraints, keep least-privilege roles, review filesystem mounts and payment spending controls, and require explicit approval before deployment or tool-exposure changes.",
   "last_verified": "2026-04-29",
   "path": "skills/aws/aws-agentcore",
   "author": "github: Raishin",
-  "version": "0.1.6"
+  "version": "0.1.8"
 }