@raishin/vanguard-frontier-agentic 2.9.0 → 2.11.0

package/skills/netsuite/netsuite-ai-connector-mcp-skill/references/least-privilege.md

@@ -0,0 +1,63 @@
+# Least-privilege NetSuite posture for NetSuite AI Connector MCP Agent
+
+## Execution tier
+
+**T0 — Static Review**
+
+Rationale: `execution_tier: "static-review"` declared in `metadata.json`. This agent reviews sanitized configuration excerpts and never holds a live NetSuite session.
+
+## Identity model
+
+No live NetSuite identity is required for the agent itself. When a human operator acts on this agent's review, they SHOULD use the least-privilege custom role below — never the Administrator role.
+
+## Recommended custom role
+
+- **Custom role name:** NetSuite AI Connector Reviewer (custom)
+- **Copy from standard role:** Custom role — no standard role grants only the two required AI Connector permissions; build from scratch or copy a minimal standard role and strip to View-only (NetSuite guidance: start from a copy of a standard role, then remove unneeded permissions).
+- **Modules in scope:** SuiteScript, OAuth 2.0, REST Web Services
+- **Two-Factor Authentication required:** Yes
+
+### Minimal permissions
+
+- **MCP Server Connection** (View) — The exact required permission for AI Connector access (evidence row 6b) — reviewer needs View to confirm it is present
+- **Log in using OAuth 2.0 Access Tokens** (View) — The exact required permission for AI Connector OAuth 2.0 authentication (evidence row 6c) — reviewer needs View to confirm it is present and is not confused with 'Log in using Access Tokens'
+- **Roles** (View) — Required to inspect the AI Connector role configuration and verify it is not the Administrator role
+- **Custom Records** (View) — Required to inspect tool allowlist custom record configurations if defined as custom records
+
+## Forbidden
+
+- Administrator role
+- Any role with full permissions to access NetSuite features (blocked by AI Connector policy, evidence row 6a)
+- Log in using Access Tokens permission (this is NOT the same as Log in using OAuth 2.0 Access Tokens, evidence row 6c)
+- Access Token Management permission
+- OAuth 2.0 Authorized Applications Management permission
+
+## Blast-radius bound
+
+Even if fully compromised, this agent cannot mutate a NetSuite account: it has no live session, no API tokens, and no SDF deploy rights. It can only produce review text.
+
+## Refusal triggers
+
+- Request provides live NetSuite credentials, session tokens, TBA tokens, OAuth client secrets, or admin passwords — refuse immediately, do not log or echo
+- Request asks the agent to use the Administrator role or any role with full permissions to access NetSuite features for AI Connector configuration (evidence row 6a)
+- Request asks the agent to directly activate, modify, or disable the AI Connector Service in a live account
+- Request uses 'Log in using Access Tokens' instead of 'Log in using OAuth 2.0 Access Tokens' and asserts they are equivalent — they are NOT equivalent (evidence row 6c); flag and correct
+- Request claims AI Specialist or AI Professional certifications are currently available — they are COMING SOON only (evidence rows 1b, AI track)
+- Request attempts to configure the AI Connector for a healthcare account with a signed BAA — blocked by Oracle policy (evidence row 6e)
+
+## Escalation path
+
+Route all live-account changes to `netsuite-live-org-mutation-guard-agent` with a named human decision owner and a structured case capsule.
+
+## Role creation steps
+
+1. In the target SANDBOX, copy the standard role named above to a new custom role.
+2. Remove every permission not listed under Minimal permissions.
+3. Add only the listed permissions at the stated access level.
+4. Confirm the role is NOT Administrator and grants no global/cross-subsidiary access beyond remit.
+5. Enable 2FA enforcement if the role touches privileged permissions.
+6. Test in sandbox, then assign to the integration/review user; monitor for least-privilege drift.
+
+## Companion skill
+
+`netsuite-ai-connector-mcp-skill` — NetSuite AI Connector MCP Skill

package/skills/netsuite/netsuite-ai-connector-mcp-skill/references/official-sources.md

@@ -0,0 +1,11 @@
+# Official Sources
+
+Oracle NetSuite AI Connector Required Features and Permissions page URLs (evidence rows 6a-6e)
+
+Verified 2026-06-09 against official Oracle/NetSuite documentation:
+
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_0714080625.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_4160616848.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157780312610.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html

package/skills/netsuite/netsuite-ai-connector-mcp-skill/references/prompt-injection-patterns.md

@@ -0,0 +1,13 @@
+# Prompt Injection Patterns
+
+Reference patterns for prompt-injection testing and SafeWords mitigations in NetSuite AI Connector sessions
+
+Scope: Audits the NetSuite AI Connector Service setup for correct role/permission configuration (NOT Administrator; exactly 'MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens'), explicit tool allowlists, HIPAA/BAA restriction compliance, and prompt-injection safeguards. Combines Vanguard harness governance (routing, logging, retry) with Oracle upstream AI connector guardrails.
+
+- AI Connector role review: confirming the connecting role is NOT the Administrator role and does not have full permissions to access all NetSuite features (evidence row 6a)
+- Required permission verification: exactly 'MCP Server Connection' (evidence row 6b) and 'Log in using OAuth 2.0 Access Tokens' (evidence row 6c) — neither more nor less
+- Required feature verification: Server SuiteScript enabled, OAuth 2.0 enabled, REST Web Services enabled if using MCP Standard Tools SuiteApp (evidence row 6d)
+- Tool allowlist review: assessment of whether explicit tool allowlists are defined and scoped to the minimum set of NetSuite operations needed by the AI session
+- Prompt-injection testing coverage: review of whether prompt-injection test cases exist for the AI Connector integration and whether SafeWords principles are applied
+- HIPAA/BAA restriction check: flagging any healthcare account with a signed BAA attempting to activate the AI Connector (evidence row 6e)
+- Harness governance: Vanguard-specific tool-call logging, retry logic, and escalation routing for AI Connector sessions

package/skills/netsuite/netsuite-ai-connector-mcp-skill/references/release-drift.md

@@ -0,0 +1,11 @@
+# Release Drift
+
+AI Connector feature changes by NetSuite release that may affect MCP governance posture
+
+NetSuite releases biannually. Content verified 2026-06-09.
+
+Release-sensitive items to re-verify each release:
+
+- SOAP web services removal timeline (REST + OAuth 2.0 recommended for new integrations from 2026.1; new SOAP integrations blocked at 2027.1).
+- Certification availability (AI Specialist/Professional and BI & Reporting Professional are Coming Soon — re-check status).
+- AI Connector / MCP permission names and role restrictions.

package/skills/netsuite/netsuite-ai-connector-mcp-skill/references/safety-checklist.md

@@ -0,0 +1,19 @@
+# Safety Checklist
+
+Pre-review checklist for AI Connector role, permissions, features, and HIPAA/BAA status
+
+- No live NetSuite credentials, tokens, or session cookies accepted
+- AI Connector role must never be Administrator or full-permission role — Critical if present
+- Exact permission names must match verbatim: 'MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens'
+- HIPAA/BAA healthcare accounts must not activate AI Connector — Critical if attempted
+- Tool allowlist must be explicit — implicit full access is a High finding
+- All findings labeled [FACT], [ASSUMPTION], or [INFERENCE] with source config reference
+
+## Refusal triggers
+
+- Request provides live NetSuite credentials, session tokens, TBA tokens, OAuth client secrets, or admin passwords — refuse immediately, do not log or echo
+- Request asks the agent to use the Administrator role or any role with full permissions to access NetSuite features for AI Connector configuration (evidence row 6a)
+- Request asks the agent to directly activate, modify, or disable the AI Connector Service in a live account
+- Request uses 'Log in using Access Tokens' instead of 'Log in using OAuth 2.0 Access Tokens' and asserts they are equivalent — they are NOT equivalent (evidence row 6c); flag and correct
+- Request claims AI Specialist or AI Professional certifications are currently available — they are COMING SOON only (evidence rows 1b, AI track)
+- Request attempts to configure the AI Connector for a healthcare account with a signed BAA — blocked by Oracle policy (evidence row 6e)

package/skills/netsuite/netsuite-ai-foundations-skill/SKILL.md

@@ -0,0 +1,85 @@
+---
+name: netsuite-ai-foundations-skill
+description: "Flashlight skill for reviewing NetSuite AI feature enablement and AI Connector Service configuration posture, aligned to the AI Foundations Associate certification (N16765GC10, available). T0 static review — no live account connection required. NOTE: AI Specialist and AI Professional certifications are COMING SOON and are not yet available; this skill does not cover those levels. TRIGGER when: user asks to review NetSuite AI feature enablement (bill matching, anomaly detection, text enhancement, predicted risk), AI Connector Service configuration, MCP Server Connection permission setup, OAuth 2.0 Access Tokens permission for AI roles, HIPAA/BAA restriction for healthcare accounts, or AI governance and PII exposure controls. Trigger phrases: AI Foundations review, AI Connector configuration, MCP Server Connection permission, NetSuite AI features, AI bill matching, AI anomaly detection, HIPAA AI restriction, AI governance review, Log in using OAuth 2.0 Access Tokens. DO NOT TRIGGER when: request is about AI Connector MCP tool execution or SuiteQL query safety (use netsuite-ai-connector-mcp-agent); OAuth 2.0 authentication setup beyond the AI role (use netsuite-sso-oauth-tba-agent); SuiteScript code security (use netsuite-suitescript-secure-code-review-agent); or live account mutation is required (use netsuite-live-org-mutation-guard-agent). Never assert that AI Specialist or AI Professional certifications are available — they are COMING SOON."
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-06-09"
+  category: ai
+  lifecycle: experimental
+  execution_tier: static-review
+  mcp_servers: []
+  oauth_scopes: []
+  run_as_permissions:
+    required: []
+    denied: []
+---
+
+# NetSuite AI Foundations Skill
+
+## Purpose
+
+Validates that NetSuite AI feature configurations and AI Connector setup follow least-privilege, zero-trust, and data-governance principles aligned to the AI Foundations Associate certification (N16765GC10, available). AI Specialist and AI Professional certifications are COMING SOON and are not available; this agent does not claim alignment to those levels. T0 static review — no NetSuite account connection required; output is a draft for human review.
+
+## When This Skill Owns the Task
+
+- User submits AI feature enablement screenshots for governance review
+- Implementation team needs AI Connector custom role validated against least-privilege requirements (not Administrator, MCP Server Connection + Log in using OAuth 2.0 Access Tokens)
+- Healthcare customer needs HIPAA/BAA restriction check before enabling AI Connector
+- CoE architect needs AI foundations governance posture reviewed for enterprise deployment
+
+## Recommended Workflow
+
+1. Step 1 — Collect sanitized inputs: request AI feature enablement screenshot, AI Connector custom role permission export, healthcare/BAA status confirmation, and Server SuiteScript/OAuth 2.0 feature flag status
+2. Step 2 — HIPAA/BAA gate: if the account is a healthcare customer with a signed BAA, immediately flag AI Connector activation as blocked (Critical finding); do not proceed with activation advice
+3. Step 3 — AI feature enablement review: validate which AI features are enabled (bill matching, anomaly detection, text enhancement, predicted risk); flag any feature enabled without a corresponding governance control
+4. Step 4 — AI Connector role validation: confirm the custom role is not Administrator, holds MCP Server Connection and Log in using OAuth 2.0 Access Tokens permissions (not 'Log in using Access Tokens'), and has 2FA designation
+5. Step 5 — Feature flag verification: confirm Server SuiteScript, OAuth 2.0, and (if applicable) REST Web Services are enabled before AI Connector can operate
+6. Step 6 — PII exposure review: identify which record types and fields are accessible via AI features; flag any sensitive fields (SSN, bank account, credit card) exposed without masking
+7. Step 7 — Emit findings report: rated Critical / High / Medium / Low with [FACT] / [INFERENCE] / [ASSUMPTION] labels and safe-next-actions
+
+## Evidence Hierarchy
+
+LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED
+
+## Safety Checklist
+
+- No live NetSuite connection — all inputs are sanitized configuration excerpts
+- No credentials, tokens, consumer keys, or client secrets in submitted inputs
+- Never claim AI Specialist or AI Professional certification availability — both are COMING SOON
+- AI Connector role is never Administrator and never holds full module permissions
+- HIPAA/BAA restriction is checked before any AI Connector enablement advice is given
+- Log in using OAuth 2.0 Access Tokens permission is distinguished from Log in using Access Tokens (evidence-matrix row 6c)
+
+## Rules — Hard-Stop Constraints
+
+- Static review only; never connect to a live NetSuite account or invoke APIs/SuiteScript/SDF.
+- Never request or accept credentials, tokens, or secrets.
+- Never depend on the Administrator role; recommend least-privilege custom roles (note 2FA).
+- Prefer OAuth 2.0 (REST/RESTlets/SuiteAnalytics Connect) over SOAP; treat SOAP as a migration risk.
+- Never claim a Coming-Soon certification is available.
+
+## Refusal Triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, or any authentication material — stop and instruct sanitization
+- Request involves mutating, activating AI features, or modifying role permissions in a live or production account — route to netsuite-live-org-mutation-guard-agent
+- Request asks the agent to log in, connect, or authenticate to any NetSuite environment
+- Request to assert AI Specialist or AI Professional certification as available — those are COMING SOON; refuse with explicit citation of evidence-matrix row 1b
+- Claim that the Administrator role can be used for AI Connector — refuse; evidence-matrix row 6a explicitly prohibits Administrator or full-permissions roles for AI Connector
+
+## T0 Contract
+
+No account connection, no OAuth, no secrets. Output is draft review text for a human owner.
+
+## Security Notes
+
+Static review only — works exclusively from sanitized configuration excerpts; never requests or accepts credentials, tokens, consumer keys, client secrets, or any authentication material. Does not connect to, query, or mutate any NetSuite account. AI Connector role must never be Administrator; required permissions are MCP Server Connection and Log in using OAuth 2.0 Access Tokens only. HIPAA/BAA restriction for healthcare customers is a hard gate. AI Specialist and AI Professional certifications are COMING SOON — never claimed as available.
+
+## Reference File Index
+
+- [official-sources.md](references/official-sources.md) — Oracle NetSuite AI Foundations Associate exam URL and AI Connector documentation URLs verified in evidence-matrix
+- [safety-checklist.md](references/safety-checklist.md) — Pre-submission sanitization checklist for AI feature and AI Connector configuration exports
+- [least-privilege.md](references/least-privilege.md) — AI Connector custom role construction guidance — MCP Server Connection + Log in using OAuth 2.0 Access Tokens, never Administrator
+- [release-drift.md](references/release-drift.md) — NetSuite release cadence notes for AI feature changes and AI Connector updates
+- [ai-foundations-cert-status.md](references/ai-foundations-cert-status.md) — Certification availability status — AI Foundations Associate available; AI Specialist and AI Professional COMING SOON

package/skills/netsuite/netsuite-ai-foundations-skill/metadata.json

@@ -0,0 +1,36 @@
+{
+  "id": "netsuite-ai-foundations-skill",
+  "name": "NetSuite AI Foundations Skill",
+  "type": "skill",
+  "provider": "netsuite",
+  "harnesses": [
+    "claude-code",
+    "codex",
+    "cursor",
+    "gemini",
+    "kiro",
+    "other"
+  ],
+  "summary": "Flashlight skill for reviewing NetSuite AI feature enablement and AI Connector Service configuration posture, aligned to the AI Foundations Associate certification (N16765GC10, available). T0 static review — no live account connection required. NOTE: AI Specialist and AI Professional certifications ",
+  "source_type": "original",
+  "category": "ai",
+  "execution_tier": "static-review",
+  "oauth_scopes": [],
+  "mcp_servers": [],
+  "run_as_permissions": {},
+  "sandbox_only": false,
+  "production_allowed": true,
+  "official_docs": [
+    "https://education.oracle.com/oracle-netsuite-ai-foundations-associate/pexam_N16765GC10",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_0714080625.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_4160616848.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157780312610.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html"
+  ],
+  "security_notes": "Static review only — works exclusively from sanitized configuration excerpts; never requests or accepts credentials, tokens, consumer keys, client secrets, or any authentication material. Does not connect to, query, or mutate any NetSuite account. AI Connector role must never be Administrator; required permissions are MCP Server Connection and Log in using OAuth 2.0 Access Tokens only. HIPAA/BAA restriction for healthcare customers is a hard gate. AI Specialist and AI Professional certifications are COMING SOON — never claimed as available.",
+  "last_verified": "2026-06-09",
+  "path": "skills/netsuite/netsuite-ai-foundations-skill",
+  "author": "github: Raishin",
+  "version": "0.1.0"
+}

package/skills/netsuite/netsuite-ai-foundations-skill/references/ai-foundations-cert-status.md

@@ -0,0 +1,12 @@
+# Ai Foundations Cert Status
+
+Certification availability status — AI Foundations Associate available; AI Specialist and AI Professional COMING SOON
+
+Scope: Validates that NetSuite AI feature configurations and AI Connector setup follow least-privilege, zero-trust, and data-governance principles aligned to the AI Foundations Associate certification (N16765GC10, available). AI Specialist and AI Professional certifications are COMING SOON and are not available; this agent does not claim alignment to those levels.
+
+- AI feature enablement review — bill matching, anomaly detection, text enhancement, predicted risk, and GL impact settings in account preferences
+- AI Connector Service configuration posture — MCP Server Connection permission, Log in using OAuth 2.0 Access Tokens permission, Server SuiteScript and OAuth 2.0 feature flags, REST Web Services flag for MCP Standard Tools SuiteApp
+- AI Connector role and permission boundaries — verifying the custom role is NOT Administrator and does NOT have full permissions to access NetSuite features (evidence-matrix row 6a)
+- HIPAA/BAA restriction review — flagging AI Connector enablement for healthcare customers with a signed BAA (evidence-matrix row 6e)
+- Data governance controls for AI output — reviewing what record types and fields are accessible via AI-assisted features and flagging PII exposure risk
+- AI foundations governance posture — feature flag audit, user consent settings, AI output review procedures

package/skills/netsuite/netsuite-ai-foundations-skill/references/least-privilege.md

@@ -0,0 +1,63 @@
+# Least-privilege NetSuite posture for NetSuite AI Foundations Agent
+
+## Execution tier
+
+**T0 — Static Review**
+
+Rationale: `execution_tier: "static-review"` declared in `metadata.json`. This agent reviews sanitized configuration excerpts and never holds a live NetSuite session.
+
+## Identity model
+
+No live NetSuite identity is required for the agent itself. When a human operator acts on this agent's review, they SHOULD use the least-privilege custom role below — never the Administrator role.
+
+## Recommended custom role
+
+- **Custom role name:** NetSuite AI Foundations Reviewer (custom)
+- **Copy from standard role:** Accountant (NetSuite guidance: start from a copy of a standard role, then remove unneeded permissions).
+- **Modules in scope:** AI Features, OAuth 2.0, Server SuiteScript, REST Web Services
+- **Two-Factor Authentication required:** Yes
+
+### Minimal permissions
+
+- **MCP Server Connection** (View) — Minimum required permission for AI Connector Service; must be present (evidence-matrix row 6b)
+- **Log in using OAuth 2.0 Access Tokens** (View) — Required for OAuth 2.0-based AI Connector authentication; distinct from 'Log in using Access Tokens' (evidence-matrix row 6c)
+- **Setup** (View) — Inspect AI feature enablement flags and account preferences for AI governance review
+- **Lists** (View) — Review record type and field access configuration for AI-assisted feature scope
+
+## Forbidden
+
+- Administrator role
+- Any role with full permissions to access NetSuite features
+- Access Token Management permission
+- OAuth 2.0 Authorized Applications Management permission
+- View Unencrypted Credit Cards
+- View Unencrypted ACH Account Numbers
+
+## Blast-radius bound
+
+Even if fully compromised, this agent cannot mutate a NetSuite account: it has no live session, no API tokens, and no SDF deploy rights. It can only produce review text.
+
+## Refusal triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, or any authentication material — stop and instruct sanitization
+- Request involves mutating, activating AI features, or modifying role permissions in a live or production account — route to netsuite-live-org-mutation-guard-agent
+- Request asks the agent to log in, connect, or authenticate to any NetSuite environment
+- Request to assert AI Specialist or AI Professional certification as available — those are COMING SOON; refuse with explicit citation of evidence-matrix row 1b
+- Claim that the Administrator role can be used for AI Connector — refuse; evidence-matrix row 6a explicitly prohibits Administrator or full-permissions roles for AI Connector
+
+## Escalation path
+
+Route all live-account changes to `netsuite-live-org-mutation-guard-agent` with a named human decision owner and a structured case capsule.
+
+## Role creation steps
+
+1. In the target SANDBOX, copy the standard role named above to a new custom role.
+2. Remove every permission not listed under Minimal permissions.
+3. Add only the listed permissions at the stated access level.
+4. Confirm the role is NOT Administrator and grants no global/cross-subsidiary access beyond remit.
+5. Enable 2FA enforcement if the role touches privileged permissions.
+6. Test in sandbox, then assign to the integration/review user; monitor for least-privilege drift.
+
+## Companion skill
+
+`netsuite-ai-foundations-skill` — NetSuite AI Foundations Skill

package/skills/netsuite/netsuite-ai-foundations-skill/references/official-sources.md

@@ -0,0 +1,12 @@
+# Official Sources
+
+Oracle NetSuite AI Foundations Associate exam URL and AI Connector documentation URLs verified in evidence-matrix
+
+Verified 2026-06-09 against official Oracle/NetSuite documentation:
+
+- https://education.oracle.com/oracle-netsuite-ai-foundations-associate/pexam_N16765GC10
+- https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_0714080625.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/article_4160616848.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_157780312610.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_1532968056.html

package/skills/netsuite/netsuite-ai-foundations-skill/references/release-drift.md

@@ -0,0 +1,11 @@
+# Release Drift
+
+NetSuite release cadence notes for AI feature changes and AI Connector updates
+
+NetSuite releases biannually. Content verified 2026-06-09.
+
+Release-sensitive items to re-verify each release:
+
+- SOAP web services removal timeline (REST + OAuth 2.0 recommended for new integrations from 2026.1; new SOAP integrations blocked at 2027.1).
+- Certification availability (AI Specialist/Professional and BI & Reporting Professional are Coming Soon — re-check status).
+- AI Connector / MCP permission names and role restrictions.

package/skills/netsuite/netsuite-ai-foundations-skill/references/safety-checklist.md

@@ -0,0 +1,18 @@
+# Safety Checklist
+
+Pre-submission sanitization checklist for AI feature and AI Connector configuration exports
+
+- No live NetSuite connection — all inputs are sanitized configuration excerpts
+- No credentials, tokens, consumer keys, or client secrets in submitted inputs
+- Never claim AI Specialist or AI Professional certification availability — both are COMING SOON
+- AI Connector role is never Administrator and never holds full module permissions
+- HIPAA/BAA restriction is checked before any AI Connector enablement advice is given
+- Log in using OAuth 2.0 Access Tokens permission is distinguished from Log in using Access Tokens (evidence-matrix row 6c)
+
+## Refusal triggers
+
+- Input contains credentials, tokens, consumer keys, client secrets, or any authentication material — stop and instruct sanitization
+- Request involves mutating, activating AI features, or modifying role permissions in a live or production account — route to netsuite-live-org-mutation-guard-agent
+- Request asks the agent to log in, connect, or authenticate to any NetSuite environment
+- Request to assert AI Specialist or AI Professional certification as available — those are COMING SOON; refuse with explicit citation of evidence-matrix row 1b
+- Claim that the Administrator role can be used for AI Connector — refuse; evidence-matrix row 6a explicitly prohibits Administrator or full-permissions roles for AI Connector

package/skills/netsuite/netsuite-application-developer-skill/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: netsuite-application-developer-skill
+description: "Reviews NetSuite SuiteScript 2.x code, SuiteFlow workflows, SuiteBuilder customizations, and UIF SPA components against Application Developer Professional standards. Depends on netsuite-suitescript-records-reference (272 record types) and netsuite-uif-spa-reference (@uif-js API) as upstream Oracle UPL-1.0 reference contexts. TRIGGER when: user asks to review or write SuiteScript, design a SuiteFlow workflow, configure a custom record or field, build a UIF SPA component, or review a script deployment; phrases include 'client script', 'user event script', 'MapReduce script', 'scheduled script', 'Suitelet', 'RESTlet', 'SuiteFlow', 'custom record type', 'UIF component', '@uif-js', 'governance limits', 'script entry point'. DO NOT TRIGGER when: the request is about SDF project deployment or SuiteScript 1.0 migration (use netsuite-suitecloud-developer-skill), security code review for injection or XSS (use netsuite-suitescript-secure-code-review-skill), REST or SOAP API integration design (use netsuite-web-services-integration-skill), or live deployment execution."
+license: UPL-1.0
+allowed-tools: Read Grep Glob
+metadata:
+  author: "github: Raishin"
+  version: "0.1.0"
+  updated: "2026-06-09"
+  category: platform
+  lifecycle: experimental
+  execution_tier: static-review
+  mcp_servers: []
+  oauth_scopes: []
+  run_as_permissions:
+    required: []
+    denied: []
+---
+
+# NetSuite Application Developer Skill
+
+## Purpose
+
+SuiteScript 2.x code quality, script-type correctness, SuiteFlow workflow logic, SuiteBuilder custom record and form design, and UIF SPA component architecture. Depends on netsuite-suitescript-records-reference and netsuite-uif-spa-reference as upstream reference skills (Oracle UPL-1.0). T0 static review — no NetSuite account connection required; output is a draft for human review.
+
+## When This Skill Owns the Task
+
+- User asks to review or write a SuiteScript 2.x client script, user event script, scheduled script, map/reduce script, Suitelet, or RESTlet
+- User needs to review a SuiteFlow workflow configuration including trigger, states, conditions, and actions
+- User asks to design or validate a SuiteBuilder custom record type, custom field, or custom form layout
+- User needs to review a UIF SPA component including DataGrid, Form, StackPanel, or store/state patterns
+- User asks about governance limits, entry-point selection, or script deployment run-as configuration
+
+## Recommended Workflow
+
+1. Step 1 — Load netsuite-suitescript-records-reference as dependency context for field ID and record type validation; load netsuite-uif-spa-reference if UIF component review is in scope.
+2. Step 2 — Gather the SuiteScript file(s) with NS annotations, the deployment record configuration, and the record type binding.
+3. Step 3 — Validate script type selection, entry-point declarations, and module require() calls for correctness and least-privilege posture.
+4. Step 4 — Assess governance limit exposure: identify synchronous paths that risk exceeding account limits; flag unbounded search loops or excessive record loads.
+5. Step 5 — Review SuiteFlow or UIF component configuration if in scope; validate API correctness against the loaded reference contexts.
+6. Step 6 — Generate findings labeled [FACT] / [ASSUMPTION] / [INFERENCE]; rate each Critical / High / Medium / Low / Unknown.
+7. Step 7 — Produce a review artifact with findings, escalation pointers, and recommended next actions.
+
+## Evidence Hierarchy
+
+LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED
+
+## Safety Checklist
+
+- No live NetSuite connection, credentials, or session tokens used at any point
+- netsuite-suitescript-records-reference loaded before asserting field ID or record type compatibility
+- netsuite-uif-spa-reference loaded before asserting @uif-js API correctness
+- Governance limit violations rated Critical when synchronous path can exhaust account limits
+- SuiteScript 1.0 patterns escalated to netsuite-suitecloud-developer-agent, not handled here
+
+## Rules — Hard-Stop Constraints
+
+- Static review only; never connect to a live NetSuite account or invoke APIs/SuiteScript/SDF.
+- Never request or accept credentials, tokens, or secrets.
+- Never depend on the Administrator role; recommend least-privilege custom roles (note 2FA).
+- Prefer OAuth 2.0 (REST/RESTlets/SuiteAnalytics Connect) over SOAP; treat SOAP as a migration risk.
+- Never claim a Coming-Soon certification is available.
+
+## Refusal Triggers
+
+- Any credentials, session tokens, API keys, or OAuth secrets included in the request
+- Request to deploy, activate, schedule, or execute any script or workflow in a live or sandbox account
+- Request to assume Administrator role or any role granting full account access
+- Request to run security penetration tests or exploit discovery — use netsuite-suitescript-secure-code-review-agent
+- Request to perform SDF project deployment or SuiteScript 1.0 migration — use netsuite-suitecloud-developer-agent
+- Coming-soon certification claimed as available for developer track extensions
+
+## T0 Contract
+
+No account connection, no OAuth, no secrets. Output is draft review text for a human owner.
+
+## Security Notes
+
+Static review only — never deploys, activates, or modifies any script, workflow, or customization in any NetSuite account. No credentials, session tokens, or API keys are requested or processed. Script run-as accounts reviewed must follow least-privilege posture with Administrator role explicitly forbidden.
+
+## Reference File Index
+
+- [official-sources.md](references/official-sources.md) — Oracle Application Developer Professional exam and SuiteScript documentation URLs
+- [safety-checklist.md](references/safety-checklist.md) — Governance limit, run-as role, and static-review safety gates
+- [least-privilege.md](references/least-privilege.md) — Custom role definition and permission rationale for developer review
+- [release-drift.md](references/release-drift.md) — NetSuite release notes affecting SuiteScript APIs, SuiteFlow, and UIF components
+- [script-type-reference.md](references/script-type-reference.md) — SuiteScript 2.x script type entry-point and governance limit quick reference

package/skills/netsuite/netsuite-application-developer-skill/metadata.json

@@ -0,0 +1,35 @@
+{
+  "id": "netsuite-application-developer-skill",
+  "name": "NetSuite Application Developer Skill",
+  "type": "skill",
+  "provider": "netsuite",
+  "harnesses": [
+    "claude-code",
+    "codex",
+    "cursor",
+    "gemini",
+    "kiro",
+    "other"
+  ],
+  "summary": "Reviews NetSuite SuiteScript 2.x code, SuiteFlow workflows, SuiteBuilder customizations, and UIF SPA components against Application Developer Professional standards. Depends on netsuite-suitescript-records-reference (272 record types) and netsuite-uif-spa-reference (@uif-js API) as upstream Oracle U",
+  "source_type": "adapted",
+  "category": "platform",
+  "execution_tier": "static-review",
+  "oauth_scopes": [],
+  "mcp_servers": [],
+  "run_as_permissions": {},
+  "sandbox_only": false,
+  "production_allowed": true,
+  "official_docs": [
+    "https://education.oracle.com/oracle-netsuite-application-developer-professional/pexam_N16304GC10",
+    "https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html",
+    "https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N295396.html"
+  ],
+  "security_notes": "Static review only — never deploys, activates, or modifies any script, workflow, or customization in any NetSuite account. No credentials, session tokens, or API keys are requested or processed. Script run-as accounts reviewed must follow least-privilege posture with Administrator role explicitly forbidden.",
+  "last_verified": "2026-06-09",
+  "path": "skills/netsuite/netsuite-application-developer-skill",
+  "author": "github: Raishin",
+  "version": "0.1.0",
+  "source_attribution": "Adapted with DEPENDENCY on oracle/netsuite-suitecloud-sdk packages/agent-skills/netsuite-suitescript-records-reference and netsuite-uif-spa-reference (UPL-1.0, Copyright (c) 2019, 2023 Oracle and/or its affiliates). Vanguard additions: [FACT]/[ASSUMPTION]/[INFERENCE] evidence labeling, governance-limit severity classification, explicit SuiteScript 1.0 detection and escalation path, least-privilege run-as role enforcement, and Vanguard harness routing integration."
+}

package/skills/netsuite/netsuite-application-developer-skill/references/least-privilege.md

@@ -0,0 +1,64 @@
+# Least-privilege NetSuite posture for NetSuite Application Developer Agent
+
+## Execution tier
+
+**T0 — Static Review**
+
+Rationale: `execution_tier: "static-review"` declared in `metadata.json`. This agent reviews sanitized configuration excerpts and never holds a live NetSuite session.
+
+## Identity model
+
+No live NetSuite identity is required for the agent itself. When a human operator acts on this agent's review, they SHOULD use the least-privilege custom role below — never the Administrator role.
+
+## Recommended custom role
+
+- **Custom role name:** NetSuite App Developer Reviewer (custom)
+- **Copy from standard role:** Developer (NetSuite guidance: start from a copy of a standard role, then remove unneeded permissions).
+- **Modules in scope:** SuiteScript, SuiteBuilder, SuiteFlow, SuiteCloud Development Framework
+- **Two-Factor Authentication required:** Yes
+
+### Minimal permissions
+
+- **SuiteScript** (View) — Read script files and deployment records without modification
+- **SuiteFlow** (View) — Inspect workflow definitions and action configurations
+- **Custom Record Types** (View) — Review custom record definitions and field configurations
+- **Custom Fields** (View) — Validate custom field internal IDs and types
+- **Script Deployments** (View) — Inspect deployment records and run-as role bindings
+- **Log in using OAuth 2.0 Access Tokens** (Full) — Required for authenticated read-only API calls if used as run-as context; least-privilege scope only
+
+## Forbidden
+
+- Administrator role
+- Full permissions to any module
+- Edit or Create on Script Deployments for review-only sessions
+- Access Token Management permission
+
+## Blast-radius bound
+
+Even if fully compromised, this agent cannot mutate a NetSuite account: it has no live session, no API tokens, and no SDF deploy rights. It can only produce review text.
+
+## Refusal triggers
+
+- Any credentials, session tokens, API keys, or OAuth secrets included in the request
+- Request to deploy, activate, schedule, or execute any script or workflow in a live or sandbox account
+- Request to assume Administrator role or any role granting full account access
+- Request to run security penetration tests or exploit discovery — use netsuite-suitescript-secure-code-review-agent
+- Request to perform SDF project deployment or SuiteScript 1.0 migration — use netsuite-suitecloud-developer-agent
+- Coming-soon certification claimed as available for developer track extensions
+
+## Escalation path
+
+Route all live-account changes to `netsuite-live-org-mutation-guard-agent` with a named human decision owner and a structured case capsule.
+
+## Role creation steps
+
+1. In the target SANDBOX, copy the standard role named above to a new custom role.
+2. Remove every permission not listed under Minimal permissions.
+3. Add only the listed permissions at the stated access level.
+4. Confirm the role is NOT Administrator and grants no global/cross-subsidiary access beyond remit.
+5. Enable 2FA enforcement if the role touches privileged permissions.
+6. Test in sandbox, then assign to the integration/review user; monitor for least-privilege drift.
+
+## Companion skill
+
+`netsuite-application-developer-skill` — NetSuite Application Developer Skill

package/skills/netsuite/netsuite-application-developer-skill/references/official-sources.md

@@ -0,0 +1,10 @@
+# Official Sources
+
+Oracle Application Developer Professional exam and SuiteScript documentation URLs
+
+Verified 2026-06-09 against official Oracle/NetSuite documentation:
+
+- https://education.oracle.com/oracle-netsuite-application-developer-professional/pexam_N16304GC10
+- https://www.netsuite.com/portal/services/training/suite-training/netsuite-certification.shtml
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N285436.html
+- https://docs.oracle.com/en/cloud/saas/netsuite/ns-online-help/section_N295396.html

package/skills/netsuite/netsuite-application-developer-skill/references/release-drift.md

@@ -0,0 +1,11 @@
+# Release Drift
+
+NetSuite release notes affecting SuiteScript APIs, SuiteFlow, and UIF components
+
+NetSuite releases biannually. Content verified 2026-06-09.
+
+Release-sensitive items to re-verify each release:
+
+- SOAP web services removal timeline (REST + OAuth 2.0 recommended for new integrations from 2026.1; new SOAP integrations blocked at 2027.1).
+- Certification availability (AI Specialist/Professional and BI & Reporting Professional are Coming Soon — re-check status).
+- AI Connector / MCP permission names and role restrictions.

package/skills/netsuite/netsuite-application-developer-skill/references/safety-checklist.md

@@ -0,0 +1,18 @@
+# Safety Checklist
+
+Governance limit, run-as role, and static-review safety gates
+
+- No live NetSuite connection, credentials, or session tokens used at any point
+- netsuite-suitescript-records-reference loaded before asserting field ID or record type compatibility
+- netsuite-uif-spa-reference loaded before asserting @uif-js API correctness
+- Governance limit violations rated Critical when synchronous path can exhaust account limits
+- SuiteScript 1.0 patterns escalated to netsuite-suitecloud-developer-agent, not handled here
+
+## Refusal triggers
+
+- Any credentials, session tokens, API keys, or OAuth secrets included in the request
+- Request to deploy, activate, schedule, or execute any script or workflow in a live or sandbox account
+- Request to assume Administrator role or any role granting full account access
+- Request to run security penetration tests or exploit discovery — use netsuite-suitescript-secure-code-review-agent
+- Request to perform SDF project deployment or SuiteScript 1.0 migration — use netsuite-suitecloud-developer-agent
+- Coming-soon certification claimed as available for developer track extensions

package/skills/netsuite/netsuite-application-developer-skill/references/script-type-reference.md

@@ -0,0 +1,14 @@
+# Script Type Reference
+
+SuiteScript 2.x script type entry-point and governance limit quick reference
+
+Scope: SuiteScript 2.x code quality, script-type correctness, SuiteFlow workflow logic, SuiteBuilder custom record and form design, and UIF SPA component architecture. Depends on netsuite-suitescript-records-reference and netsuite-uif-spa-reference as upstream reference skills (Oracle UPL-1.0).
+
+- SuiteScript 2.x: script type selection (ClientScript, UserEventScript, MapReduceScript, ScheduledScript, Suitelet, RESTlet, MassUpdateScript, WorkflowActionScript), entry-point correctness, module usage
+- Governance limit awareness: synchronous vs. asynchronous script limits, N/search usage limits, N/record load patterns
+- SuiteFlow workflow design: trigger conditions, action correctness, approval routing logic, workflow action scripts
+- SuiteBuilder customizations: custom record type design, custom field configuration, form layout, custom segments
+- UIF SPA component review: @uif-js/core and @uif-js/component API correctness, state management patterns, DataGrid and Form component usage
+- Script deployment configuration: record type binding, run-as configuration, deployment status
+- Error handling and logging patterns in SuiteScript 2.x
+- Script upgrade readiness: identifying SuiteScript 1.0 patterns requiring migration (escalate to netsuite-suitecloud-developer-agent for full SDF migration)