@raishin/vanguard-frontier-agentic 3.6.0 → 3.7.0

package/skills/aws/aws-eks-platform-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not call an EKS cluster production-ready without explicit identity, network isolation, upgrade, node disruption, image/runtime security, and observability evidence.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-eks-platform-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-event-driven-architecture-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-event-driven-architecture-review
 description: Review AWS event-driven system design across EventBridge, event buses, Pipes, SQS, SNS, Step Functions, event schemas, filtering, cross-account routing, retries, DLQs, replay, idempotency, monitoring, and event-loop risk. Prefer serverless production readiness for Lambda runtime/deployment readiness.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: platform

package/skills/aws/aws-event-driven-architecture-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not accept event-driven designs without precise patterns, DLQs/retry semantics, idempotent consumers, monitoring, cross-account policy review, and loop/cost controls.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-event-driven-architecture-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-generative-ai-developer/SKILL.md

@@ -3,7 +3,7 @@ name: aws-generative-ai-developer
 description: Build Amazon Bedrock and serverless generative AI applications using Lambda, API Gateway, Step Functions, EventBridge, S3, DynamoDB, SQS, Guardrails, and IAM. Prefer this for serverless GenAI app design and implementation; prefer aws-agentcore for AgentCore runtime, aws-bedrock-agent-security-governor for deep Bedrock security, and aws-serverless-production-readiness for final operational hardening.
 allowed-tools: Read Edit Write MultiEdit Grep Glob Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: ai

package/skills/aws/aws-generative-ai-developer/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Prefer serverless managed services for this role unless a concrete blocker is provided. Do not approve broad model access, unsafe prompt/tool flows, weak auth, uncontrolled retention, or missing observability and cost controls.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-generative-ai-developer",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-iac-change-safety-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-iac-change-safety-review
 description: Review AWS infrastructure-as-code changes across CDK, CloudFormation, SAM, Terraform, Serverless Framework, generated templates, plans, stack updates, change sets, and drift. Use when the user asks whether an AWS IaC deployment is safe, what a change set will do, why a resource replacement will happen, or how to validate before production.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-iac-change-safety-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Never approve an AWS IaC deployment from source diff alone when production state, generated artifacts, change sets, drift, replacements, destructive changes, or rollback are unresolved.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-iac-change-safety-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-iac-patch-executor/SKILL.md

@@ -3,7 +3,7 @@ name: aws-iac-patch-executor
 description: Edit AWS IaC files including CloudFormation, SAM, CDK config, and Terraform to patch defects, prepare change set review, or unblock rollout work. Prefer this for bounded repo changes only; do not use for apply, deploy, or destructive infrastructure execution.
 allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.2"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-iac-patch-executor/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Can edit IaC files, not execute live infra changes. Never hide replacements, blast-radius risks, or IAM broadening. Always surface validation gaps and rollback concerns.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-iac-patch-executor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.2"
 }

package/skills/aws/aws-iam-least-privilege-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-iam-least-privilege-review
 description: Review AWS IAM identity policies, trust policies, resource policies, permission boundaries, SCPs, session policies, role design, pass-role, federation, and Access Analyzer findings for least-privilege risk. Prefer KMS/secrets steward for key/secret lifecycle design and S3 perimeter governor for S3 exposure/data-perimeter posture unless the request is primarily policy surgery.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-iam-least-privilege-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Prefer read-only inspection and minimum permission changes. Do not broaden IAM access, invent ARNs, or approve production trust changes without Access Analyzer validation where available.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-iam-least-privilege-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-kms-secrets-lifecycle-steward/SKILL.md

@@ -3,7 +3,7 @@ name: aws-kms-secrets-lifecycle-steward
 description: Review AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-kms-secrets-lifecycle-steward/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not change key policies, grants, key deletion, secret rotation, or multi-Region encryption without impact analysis for access, recovery, auditability, and rollback.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-kms-secrets-lifecycle-steward",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-landing-zone-governor/SKILL.md

@@ -3,7 +3,7 @@ name: aws-landing-zone-governor
 description: Review and design AWS landing zones, AWS Control Tower environments, Organizations structures, OUs, account vending patterns, guardrails, central logging, security/audit accounts, and multi-account governance. Use when the user asks how to structure AWS accounts or govern a cloud estate.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: compliance

package/skills/aws/aws-landing-zone-governor/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not collapse environments into one account for convenience. Treat weak OU design, missing centralized logging, unmanaged SCPs, and unclear account ownership as governance risks.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-landing-zone-governor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-live-deployment-guarded-operator/SKILL.md

@@ -3,7 +3,7 @@ name: aws-live-deployment-guarded-operator
 description: Operate guarded live AWS deployment changes with explicit account, region, profile, approval, dry-run, rollback, and verification gates. Use only when the target environment is confirmed and a live deployment action is intentionally requested.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.3"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-live-deployment-guarded-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "This role may work in repos connected to live AWS credentials. Never run live deployment mutations without explicit target confirmation, preview evidence, approval, rollback readiness, and post-change verification.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-live-deployment-guarded-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.3"
 }

package/skills/aws/aws-live-ecs-rollout-guard/SKILL.md

@@ -3,7 +3,7 @@ name: aws-live-ecs-rollout-guard
 description: Guard live Amazon ECS and Fargate rollout actions with ecs service, task definition, deployment circuit breaker, alarms, rollback, health check, and approval gates. Use only for intentional live ECS rollout actions against confirmed targets.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.3"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-live-ecs-rollout-guard/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Live ECS rollout actions require exact service targeting, health evidence, rollback posture, and explicit approval. Never treat force-new-deployment as a harmless default.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-live-ecs-rollout-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.3"
 }

package/skills/aws/aws-live-iac-change-guard/SKILL.md

@@ -3,7 +3,7 @@ name: aws-live-iac-change-guard
 description: Guard live CloudFormation, SAM, CDK, and Terraform-backed AWS infrastructure changes with change set, drift, stack policy, rollback trigger, approval, and execute gates. Use only for intentional live IaC execution with confirmed targets.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.3"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-live-iac-change-guard/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Live IaC execution only with explicit preview evidence, confirmed targets, rollback triggers or equivalent safeguards, and human approval before execute. Never treat repo write access as enough authority for live infrastructure mutation.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-live-iac-change-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.3"
 }

package/skills/aws/aws-live-pipeline-approval-operator/SKILL.md

@@ -3,7 +3,7 @@ name: aws-live-pipeline-approval-operator
 description: Handle live CodePipeline approval and gated resume decisions with pipeline, stage, approver, SNS, approval, blast radius, and rollback checks. Use only when a real pipeline execution is paused or about to be approved.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.3"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-live-pipeline-approval-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "This role may interact with real pipeline approvals. Never approve, reject, or resume the wrong execution. Require exact targeting, approver authority, evidence review, and post-action verification.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-live-pipeline-approval-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.3"
 }

package/skills/aws/aws-live-serverless-release-guard/SKILL.md

@@ -3,7 +3,7 @@ name: aws-live-serverless-release-guard
 description: Guard live Lambda and serverless release actions with lambda alias, codedeploy, canary, linear, alarms, rollback, and approval gates. Use only for intentional live serverless rollout actions against confirmed targets.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.3"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-live-serverless-release-guard/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Live serverless rollout actions require exact alias or deployment targeting, explicit approval, alarms, rollback posture, and post-change observation. Never shift traffic casually in a live environment.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-live-serverless-release-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.3"
 }

package/skills/aws/aws-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: aws-maestro
 description: Route AWS tasks to the narrowest specialist or team of specialists from the 42-agent catalog. Use when you do not already know the specialist. Not for direct AWS answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents — requires explicit human confirmation with blast-radius and rollback before routing to any live deployment or production-change specialist.
 allowed-tools: Agent Skill Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: ai

package/skills/aws/aws-maestro/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Live-guard gate is non-negotiable: never auto-dispatch aws-live-deployment-guarded-operator-agent, aws-live-ecs-rollout-guard-agent, aws-live-iac-change-guard-agent, aws-live-pipeline-approval-operator-agent, or aws-live-serverless-release-guard-agent without explicit human confirmation, blast-radius assessment, and rollback path. Do not ask for secrets, account IDs, or environment-specific values.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-maestro",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-migration-cutover-architect/SKILL.md

@@ -3,7 +3,7 @@ name: aws-migration-cutover-architect
 description: Plan, review, and de-risk AWS migrations and cutovers across discovery, dependency mapping, wave planning, AWS Application Migration Service, Migration Hub, test launches, acceptance tests, downtime windows, rollback, DNS, data consistency, and post-cutover validation. Use for migration planning and cutover readiness.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-migration-cutover-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not approve migration cutover without dependency evidence, tested launch, acceptance checks, rollback, security baseline, observability, and clear business owner signoff.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-migration-cutover-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-network-architect/SKILL.md

@@ -3,7 +3,7 @@ name: aws-network-architect
 description: Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: networking

package/skills/aws/aws-network-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not recommend public exposure, broad routes, overlapping CIDRs, route propagation, hybrid connectivity, DNS forwarding, or centralized inspection changes without traffic-flow evidence, rollback, and blast-radius analysis.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-network-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-non-destructive-task-automation-advisor/SKILL.md

@@ -3,7 +3,7 @@ name: aws-non-destructive-task-automation-advisor
 description: Design AWS non-destructive task automation using EventBridge, Step Functions, Lambda, Systems Manager Automation, SNS, SQS, approvals, notifications, reporting, and evidence gathering. Use only for read-only or coordination-safe automation; do not use for destructive remediation or mutation-heavy runbooks.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.2"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-non-destructive-task-automation-advisor/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "This role must stay non-destructive. Prefer notification, approval, reporting, and evidence-collection flows. Escalate if the request drifts into mutation, remediation, or destructive operational automation.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-non-destructive-task-automation-advisor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.2"
 }

package/skills/aws/aws-observability-incident-responder/SKILL.md

@@ -3,7 +3,7 @@ name: aws-observability-incident-responder
 description: Investigate broad AWS incidents and observability gaps using CloudWatch metrics, logs, alarms, traces, EventBridge events, service health, runbooks, timelines, blast radius, root-cause discipline, and post-incident actions. Prefer RDS/Aurora investigator for database-specific performance incidents.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: observability

package/skills/aws/aws-observability-incident-responder/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not claim root cause without evidence. Separate live telemetry, service health, deployment changes, AI-derived insights, and human inference; require rollback or containment for active incidents.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-observability-incident-responder",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-pipeline-fix-operator/SKILL.md

@@ -3,7 +3,7 @@ name: aws-pipeline-fix-operator
 description: Repair AWS pipeline configuration, buildspecs, workflow files, deployment steps, artifact wiring, release guardrails, and CodeDeploy integration in-repo. Use for non-destructive CI/CD corrections; do not trigger live pipeline runs or mutate cloud state.
 allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.2"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-pipeline-fix-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Repo write access only. Do not manually trigger pipelines, rotate secrets, or bypass approval gates from this role. Keep fixes explicit, reviewable, and reversible.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-pipeline-fix-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.2"
 }

package/skills/aws/aws-private-ca-issuer-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-private-ca-issuer-review
 description: Use this skill when reviewing AWS ACM Private CA (Private Certificate Authority) issuer configurations for cert-manager. Trigger on any request to audit AWSPCAIssuer, AWSPCAClusterIssuer, IRSA policy for cert-manager, certificate template ARNs, CRL configuration, or cross-account PCA usage.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-private-ca-issuer-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Using a Root CA ARN in AWSPCAIssuer exposes the root of trust directly to cert-manager. A SubordinateCACertificate template allows cert-manager to issue intermediate CAs, enabling an attacker with cert-manager IRSA access to create a shadow CA trusted by the entire corporate PKI. IRSA role must exclude acm-pca:DeleteCertificateAuthority and acm-pca:CreateCertificateAuthority.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-private-ca-issuer-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-rds-aurora-performance-investigator/SKILL.md

@@ -3,7 +3,7 @@ name: aws-rds-aurora-performance-investigator
 description: Investigate Amazon RDS and Aurora-specific incidents involving latency, connection exhaustion, slow queries, lock waits, storage pressure, CPU/I/O saturation, replica lag, failover behavior, Performance Insights, and database capacity. Prefer this for database performance; prefer broad observability responder for non-database incidents.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: observability

package/skills/aws/aws-rds-aurora-performance-investigator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not recommend resizing, failover, parameter changes, or index changes without evidence separating CPU, I/O, lock, query-plan, storage, connection, and application-driver causes.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-rds-aurora-performance-investigator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-resilience-bcdr-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-resilience-bcdr-review
 description: Review AWS resilience and business continuity strategy across RTO/RPO, dependency maps, multi-AZ, multi-Region, failover/failback, game days, runbooks, drift, and recovery validation. Prefer data protection backup steward for backup-plan/vault/restore implementation details.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: resilience

package/skills/aws/aws-resilience-bcdr-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not accept backup configuration as recovery proof. Require restore tests, RTO/RPO evidence, drift controls, owner/runbook clarity, and blast-radius analysis.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-resilience-bcdr-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-s3-data-perimeter-governor/SKILL.md

@@ -3,7 +3,7 @@ name: aws-s3-data-perimeter-governor
 description: Review Amazon S3 data perimeter and exposure posture across Block Public Access, Object Ownership, ACL removal, bucket/access point policies, TLS-only access, encryption, replication, lifecycle, logging, cross-account access, and prefix boundaries. Prefer this for S3 data exposure; prefer IAM skill for generic policy surgery.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-s3-data-perimeter-governor/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not broaden S3 public or cross-account access. Prefer Block Public Access, disabled ACLs, scoped policies, TLS-only conditions, encryption, logging, and Access Analyzer validation.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-s3-data-perimeter-governor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-security-posture-hardening/SKILL.md

@@ -3,7 +3,7 @@ name: aws-security-posture-hardening
 description: Review broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-security-posture-hardening/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not treat a green dashboard as proof of security. Verify service coverage, Regions, delegated admin, Config recording, suppressions, public exposure, and remediation evidence.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-security-posture-hardening",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-serverless-production-readiness/SKILL.md

@@ -3,7 +3,7 @@ name: aws-serverless-production-readiness
 description: Review AWS Lambda-centered serverless workloads for production readiness across execution roles, event sources, retries, DLQs/destinations, concurrency, idempotency, observability, deployment safety, performance, cost, and rollback. Prefer event-driven architecture for EventBridge/SNS/SQS/Step Functions system design, and DynamoDB/RDS skills for data-store performance.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: platform

package/skills/aws/aws-serverless-production-readiness/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not approve serverless workloads that lack least-privilege execution roles, retry/DLQ semantics, concurrency controls, observability, idempotency, and rollback evidence.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-serverless-production-readiness",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-serverless-rollout-corrector/SKILL.md

@@ -3,7 +3,7 @@ name: aws-serverless-rollout-corrector
 description: Patch AWS serverless rollout definitions across Lambda, API Gateway, EventBridge, SQS, SNS, event source wiring, aliases, versions, and deployment config. Prefer this for repo-side rollout corrections; do not perform live rollout actions or destructive operations.
 allowed-tools: Read Edit Write MultiEdit Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.2"
   updated: "2026-06-02"
   category: delivery

package/skills/aws/aws-serverless-rollout-corrector/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Can edit serverless rollout definitions in repo files only. Must not invoke live deploys, traffic shifts, or destructive remediation without separate explicit approval.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-serverless-rollout-corrector",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.2"
 }

package/skills/aws/aws-solution-architect/SKILL.md

@@ -3,7 +3,7 @@ name: aws-solution-architect
 description: Design and stress-test AWS cross-domain solution architectures when the request spans multiple AWS domains or needs an architecture decision record. Prefer narrower AWS skills for single-domain IAM, network, EKS, ECS, serverless, RDS, DynamoDB, S3, Bedrock, IaC, cost, security, migration, compliance, or incident asks.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: platform

package/skills/aws/aws-solution-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not approve an AWS architecture without account-boundary, IAM, network exposure, data protection, observability, recovery, and cost evidence. Label unknowns instead of pretending the diagram is proof.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-solution-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-ticket-triage-escalation-coordinator/SKILL.md

@@ -3,7 +3,7 @@ name: aws-ticket-triage-escalation-coordinator
 description: Triage AWS tickets and alerts using priority, owner, evidence, incident context, escalation path, OpsCenter, health signals, and safe next steps. Prefer this for non-destructive request coordination and escalation; prefer deep domain skills for implementation or root-cause investigation.
 allowed-tools: Read Grep Glob WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.2"
   updated: "2026-06-02"
   category: observability

package/skills/aws/aws-ticket-triage-escalation-coordinator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not mutate infrastructure, suppress alerts, or close issues without evidence and approval. This role classifies, routes, and escalates; it does not perform destructive remediation.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-ticket-triage-escalation-coordinator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.2"
 }

package/skills/aws/aws-waf-cost-optimization-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-waf-cost-optimization-review
 description: "Review AWS workload cost posture against the Well-Architected Framework Cost Optimization Pillar. Covers cost visibility, tagging compliance, commitment coverage, rightsizing, Spot and managed service adoption, and idle resource identification. Use when auditing cloud spend, planning Savings Plans purchases, or preparing for a formal WAF Cost Optimization Pillar review."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: finops

package/skills/aws/aws-waf-cost-optimization-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Read-only advisory. Do not cancel Reserved Instances, Savings Plans, or delete resources without explicit approval and resource inventory confirmation.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-waf-cost-optimization-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-waf-reliability-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-waf-reliability-review
 description: "Review AWS workload reliability posture against the Well-Architected Framework Reliability Pillar. Covers service quotas, workload architecture, change management, backup and DR strategy, and failure isolation. Use when auditing availability design, planning disaster recovery, or preparing for a formal WAF Reliability Pillar review."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: resilience

package/skills/aws/aws-waf-reliability-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Read-only advisory. Do not modify Auto Scaling policies, backup schedules, or DR configurations without explicit approval.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-waf-reliability-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }

package/skills/aws/aws-waf-security-review/SKILL.md

@@ -3,7 +3,7 @@ name: aws-waf-security-review
 description: "Review AWS workloads against the Well-Architected Framework Security Pillar: identity foundations, detective controls, infrastructure protection, data protection, and incident response readiness."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.4"
   updated: "2026-06-02"
   category: security

package/skills/aws/aws-waf-security-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Read-only advisory. Do not modify IAM policies, SCPs, GuardDuty configurations, or KMS keys without explicit approval. Work from AWS Config exports, Security Hub findings, or sanitized descriptions.",
   "last_verified": "2026-06-02",
   "path": "skills/aws/aws-waf-security-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.4"
 }