@raishin/vanguard-frontier-agentic 3.6.0 → 3.7.0

package/skills/gcp/gcp-event-driven-architecture-review/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-event-driven-architecture-review
 description: Review GCP Pub/Sub, Eventarc, Cloud Tasks, Cloud Scheduler, and Workflows designs — dead-letter topics, message ordering, idempotency, fan-out blast radius, schema registry, and retry storm risk.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: platform

package/skills/gcp/gcp-event-driven-architecture-review/metadata.json

@@ -24,6 +24,6 @@
   "security_notes": "Pub/Sub topics with allUsers subscriber binding expose all messages publicly — always verify subscription IAM. Eventarc service account must follow least privilege — avoid binding roles/editor. Cloud Tasks payloads may contain sensitive data — use CMEK-encrypted queues for regulated workloads.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-event-driven-architecture-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-firebase-developer/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-firebase-developer
 description: "Build, configure, and operate Firebase-powered web and mobile applications — covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building mobile/web apps with Firebase, setting up authentication flows, designing Firestore data models, deploying Firebase Hosting, or configuring Firebase security rules."
 allowed-tools: Read Grep Glob Bash(npm install:*) Bash(firebase:*)
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: platform

package/skills/gcp/gcp-firebase-developer/metadata.json

@@ -17,6 +17,6 @@
   "security_notes": "Read-only skill. Do not deploy to production, modify Firestore security rules, or change Firebase project settings without explicit approval. Client config (apiKey, projectId) is public — service account keys are private and must never be embedded in client code.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-firebase-developer",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-gcs-data-perimeter-governor/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-gcs-data-perimeter-governor
 description: Govern Google Cloud Storage data perimeters — uniform bucket-level access enforcement, public access prevention, VPC Service Controls perimeter coverage, IAM Conditions for time-bounded access, Object Lifecycle policies, and data residency compliance.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: security

package/skills/gcp/gcp-gcs-data-perimeter-governor/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "GCS buckets with allUsers binding are indexed by search engines and data scrapers within minutes of creation — remediation must be immediate. VPC-SC perimeter around GCS requires testing in dry-run mode first — enforcement mode can break legitimate GCS access from outside the perimeter instantly.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-gcs-data-perimeter-governor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-gemini-api-developer/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-gemini-api-developer
 description: "Build, integrate, and debug Gemini API applications on Google Cloud Agent Platform (formerly Vertex AI) using the unified google-genai SDK. Covers text generation, multimodal inputs, function calling, structured output, embeddings, context caching, batch prediction, streaming, Live API (bidirectional voice/video), and model tuning across Python, TypeScript/JavaScript, Go, Java, and C#. Use when building Gemini-powered applications, migrating from deprecated Vertex AI or google-generativeai SDKs, or integrating Gemini capabilities into a GCP-hosted service."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: ai

package/skills/gcp/gcp-gemini-api-developer/metadata.json

@@ -14,6 +14,6 @@
   "security_notes": "Read-only advisory. Never embed API keys or service account credentials in code examples. Use ADC and environment variables. Do not call batch jobs or fine-tuning jobs on production data without explicit user approval.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-gemini-api-developer",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-gke-platform-operator/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-gke-platform-operator
 description: Operate GKE clusters (Standard and Autopilot), manage node pools, configure Workload Identity, enforce Binary Authorization, plan node pool upgrades, and review cluster security posture.
 allowed-tools: Read Grep Glob Bash(gcloud container:*) Bash(kubectl apply:*)
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.2.0"
   updated: "2026-05-09"
   category: platform

package/skills/gcp/gcp-gke-platform-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Binary Authorization must be set to WARN mode before ENFORCE mode — enforce mode will break deployments if images are unsigned. Always prefer Workload Identity over mounted SA key files.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-gke-platform-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.2.0"
 }

package/skills/gcp/gcp-iac-change-safety-review/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-iac-change-safety-review
 description: Review Terraform and Deployment Manager changes targeting GCP — blast radius analysis, destroy-operation detection, cross-project impact, state file conflicts, org policy drift, and rollback plan completeness.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: delivery

package/skills/gcp/gcp-iac-change-safety-review/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Terraform state files contain sensitive resource attributes — backend bucket must use CMEK and uniform bucket-level access. Org-level IAM and org policy changes via Terraform have org-wide blast radius — require dual approval and tested rollback. Force-unlocking state under an active apply causes corruption.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-iac-change-safety-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-iam-least-privilege-review/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-iam-least-privilege-review
 description: Audit GCP IAM bindings across the resource hierarchy (org/folder/project), identify overprivileged Service Accounts, review Workload Identity Federation configurations, evaluate org policy conditions, and recommend least-privilege remediation. Prefer gcp-secret-kms-lifecycle-steward for KMS/Secret Manager lifecycle design and gcp-vpc-service-controls-architect for perimeter access policy posture unless the request is primarily IAM binding surgery.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: security

package/skills/gcp/gcp-iam-least-privilege-review/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Prefer read-only inspection and minimum permission changes. Do not broaden IAM bindings, invent resource paths, or approve production trust changes without grounding in sanitized evidence.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-iam-least-privilege-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-landing-zone-architect/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-landing-zone-architect
 description: Design and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: platform

package/skills/gcp/gcp-landing-zone-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Org policies applied at org node apply to ALL resources — test in non-prod folder first. Data Access audit logs must be enabled for sensitive services (KMS, IAM, BigQuery) — not enabled by default.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-landing-zone-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-live-bigquery-dataset-deletion-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-bigquery-dataset-deletion-guard
 description: Gate BigQuery dataset deletion, table truncation, and authorized view changes against a full downstream dependency audit and export confirmation. Dataset deletion is immediate and permanent with no recycle bin — this guard ensures no dataset is deleted without enumerating all tables, scheduled queries, Data Transfer jobs, Looker connections, and Dataflow pipelines that depend on it.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: data

package/skills/gcp/gcp-live-bigquery-dataset-deletion-guard/metadata.json

@@ -20,7 +20,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-bigquery-dataset-deletion-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "BigQuery dataset deletion is irreversible and removes all tables and data permanently. Authorized view bindings are also deleted. Downstream queries and scheduled jobs referencing the dataset fail immediately."
 }

package/skills/gcp/gcp-live-cloud-run-traffic-migration-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-cloud-run-traffic-migration-guard
 description: Gate Cloud Run traffic percentage migrations, min-instances changes, and revision deletions against revision health verification and rollback posture assessment. Migrating 100% traffic to a broken revision causes complete service unavailability with no automatic rollback — this guard enforces health checks, gradual canary splits, and explicit approval before any production traffic change is executed.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: delivery

package/skills/gcp/gcp-live-cloud-run-traffic-migration-guard/metadata.json

@@ -20,7 +20,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-cloud-run-traffic-migration-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "Cloud Run traffic percentage changes take effect immediately. Zero percent traffic to a revision does not stop it but removes user traffic. Min-instance changes affect billing immediately. Rollback requires manual traffic re-assignment."
 }

package/skills/gcp/gcp-live-cost-budget-action-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-cost-budget-action-guard
 description: Gate Cloud Billing budget threshold changes, committed-use discount (CUD) purchases, and quota increase requests with explicit financial-authority approval. CUD contracts are 1-3 year financial commitments that cannot be cancelled — this guard ensures every billing action is backed by spend-impact assessment, budget inventory review, and confirmed financial authority before execution.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: finops

package/skills/gcp/gcp-live-cost-budget-action-guard/metadata.json

@@ -20,7 +20,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-cost-budget-action-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "Budget threshold reduction can trigger service suspension if current spend exceeds the new threshold. CUD and SUD commitments are non-refundable. Quota increase requests may affect billing tier."
 }

package/skills/gcp/gcp-live-gke-rollout-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-gke-rollout-guard
 description: Gate GKE deployment mutations, node pool upgrades, and cluster control-plane version changes against rollback posture and PDB audit before any production change. Prevents irreversible node pool upgrades from proceeding without PodDisruptionBudget verification, surge settings review, and explicit operator approval.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: delivery

package/skills/gcp/gcp-live-gke-rollout-guard/metadata.json

@@ -21,7 +21,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-gke-rollout-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "GKE control-plane version upgrade cannot be rolled back. Node pool upgrades can evict workloads without PDB compliance. Autopilot mode changes are irreversible."
 }

package/skills/gcp/gcp-live-iam-policy-change-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-iam-policy-change-guard
 description: Gate IAM binding mutations, org policy changes, and Service Account key creation against the GCP resource hierarchy. IAM bindings at org level propagate to all folders and projects — this guard enforces blast-radius assessment, audit-trail confirmation, and explicit authority approval before any policy mutation is executed.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: security

package/skills/gcp/gcp-live-iam-policy-change-guard/metadata.json

@@ -20,7 +20,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-iam-policy-change-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "IAM binding changes at project or org level take effect immediately with org-wide blast radius. Removing the last owner binding makes the resource unmanageable. Service Account key creation creates an unaudited credential."
 }

package/skills/gcp/gcp-live-kms-key-destruction-guard/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-live-kms-key-destruction-guard
 description: Gate Cloud KMS key version destruction and key ring deletion against a complete CMEK dependency audit. All Cloud SQL, GCS, BigQuery, Compute Engine disk, and Secret Manager resources encrypted by the key version become permanently inaccessible once destruction completes — this guard ensures no key version is destroyed without enumerating every dependent resource and obtaining explicit operator approval.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: security

package/skills/gcp/gcp-live-kms-key-destruction-guard/metadata.json

@@ -20,7 +20,7 @@
   ],
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-live-kms-key-destruction-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "security_notes": "KMS key version destruction is irreversible after the scheduled destruction date. All CMEK-encrypted data using that key version becomes permanently inaccessible."
 }

package/skills/gcp/gcp-load-balancer-traffic-engineer/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-load-balancer-traffic-engineer
 description: Traffic engineering for GCP load balancers — Global HTTPS LB, Regional HTTPS LB, TCP/SSL Proxy LB, Network LB (passthrough), Internal TCP/UDP LB — type selection, health check configuration, Cloud Armor integration, and traffic distribution.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: networking

package/skills/gcp/gcp-load-balancer-traffic-engineer/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Global HTTPS LB with Cloud Armor is the only GCP-native L7 DDoS and WAF layer — bypassing it with Network LB or TCP Proxy eliminates WAF capability. Self-managed SSL certificates in GCP LB expose the private key during upload — use Google-managed certificates or Certificate Manager for all production workloads.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-load-balancer-traffic-engineer",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-maestro
 description: GCP Maestro routing skill. Classify the user's GCP task, select the narrowest specialist agent or the right team of specialists from the catalog, and dispatch them — single specialist for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatch live-guard agents. Understands GCP's global VPC model, resource hierarchy (org→folder→project), and IAM inheritance before routing any networking or identity task.
 allowed-tools: Agent Skill Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: ai

package/skills/gcp/gcp-maestro/metadata.json

@@ -15,6 +15,6 @@
   "security_notes": "Maestro must never auto-dispatch live-guard agents. GCP IAM org-level bindings and KMS key destruction are irreversible with org-wide or permanent data-loss blast radius. Always surface blast-radius and require written human confirmation before routing to any of the 6 live-guard agents.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-maestro",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-migration-cutover-architect/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-migration-cutover-architect
 description: Plan and execute migrations to GCP using Migrate to Virtual Machines, Database Migration Service, Storage Transfer Service, and design cutover sequencing with rollback plans.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: platform

package/skills/gcp/gcp-migration-cutover-architect/metadata.json

@@ -21,6 +21,6 @@
   "security_notes": "Keep the original source available for minimum 30 days post-cutover. DNS TTL must be reduced to 60s at least 24-48h before cutover. Reverting DNS is faster than reverting data. DMS continuous replication must be validated before the cutover window begins.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-migration-cutover-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-network-architect/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-network-architect
 description: Design and review GCP network architecture including global VPC topology, Shared VPC patterns, Cloud Interconnect/VPN hybrid connectivity, Cloud NAT, DNS, Cloud Armor, and Traffic Director service mesh.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: networking

package/skills/gcp/gcp-network-architect/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "GCP VPCs are global — a single VPC spans all regions. Shared VPC IAM roles at subnet level control service project access. Never expose internal services through public IP without Cloud Armor or equivalent WAF protection.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-network-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-networking-observability/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-networking-observability
 description: "Investigate GCP network issues by analyzing VPC Flow Logs, firewall logs, Cloud NAT logs, threat logs, and networking metrics. Diagnose connectivity, packet loss, top talkers, and firewall block events using BigQuery-first methodology and Cloud Monitoring fallback. Use when investigating VPC traffic anomalies, firewall DENY events, NAT port exhaustion, latency spikes, or running Connectivity Tests for path diagnostics."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: observability

package/skills/gcp/gcp-networking-observability/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Read-only forensic analysis. Never modify firewall rules, routes, or NAT configs. Never run queries that write data. Print SQL before executing for user review.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-networking-observability",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-observability-incident-responder/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-observability-incident-responder
 description: Respond to incidents and set up observability using Cloud Monitoring, Cloud Logging, Error Reporting, Cloud Trace, and SLO burn rate alerting.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: observability

package/skills/gcp/gcp-observability-incident-responder/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Do not claim root cause without evidence. Separate live telemetry from inference. Log Router sinks are required for compliance log retention. Cloud Trace sampling rate affects investigation coverage. Require containment before remediation for active incidents.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-observability-incident-responder",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-registry-artifact-governor/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-registry-artifact-governor
 description: Govern GCP Artifact Registry — container image signing via Binary Authorization, vulnerability scanning via Container Analysis, repository IAM least privilege, artifact retention policies, and supply chain security posture.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: security

package/skills/gcp/gcp-registry-artifact-governor/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Binary Authorization with 'Allow all images' is equivalent to no supply chain protection — enforce attested images from trusted build pipelines. Artifact Registry supports CMEK — enable for regulated workloads. Public repositories expose all tags and digests; use private repositories with Workload Identity Federation for CI/CD access.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-registry-artifact-governor",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-resilience-bcdr-review/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-resilience-bcdr-review
 description: Review GCP workload HA and BCDR designs — multi-region architectures, Cloud SQL HA failover, Spanner global instances, GKE multi-cluster, RTO/RPO target analysis, and runbook completeness.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: resilience

package/skills/gcp/gcp-resilience-bcdr-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Cloud SQL HA is zone-redundant only — cross-region failover is manual (replica promotion). Cloud Run has no built-in multi-region failover. RTO/RPO targets without tested recovery evidence are aspirational. Require last recovery test date and result before marking BCDR as operational.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-resilience-bcdr-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-resource-inventory-analyst/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-resource-inventory-analyst
 description: Query Asset Inventory API for resource discovery, audit resource label/tag coverage, detect stale or orphaned resources, review change history, and build inventory reports across projects and folders.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: compliance

package/skills/gcp/gcp-resource-inventory-analyst/metadata.json

@@ -21,6 +21,6 @@
   "security_notes": "Cloud Asset Inventory change history covers 35 days — explicitly state this limit for older investigations. Stale resources (unattached static IPs, disks, orphaned firewall rules) incur ongoing charges. Resources missing required labels cannot be attributed in billing exports.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-resource-inventory-analyst",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-secret-kms-lifecycle-steward/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-secret-kms-lifecycle-steward
 description: Audit and govern Cloud KMS key lifecycles, Secret Manager secrets, CMEK configurations across GCP services (Cloud SQL, BigQuery, GCS, Compute), key rotation schedules, and envelope encryption patterns. Prefer gcp-iam-least-privilege-review for IAM binding review on KMS keys and gcp-security-posture-hardening for broad org-level encryption policy gaps.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: security

package/skills/gcp/gcp-secret-kms-lifecycle-steward/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Prefer read-only inspection. Do not delete key versions, disable keys, or modify CMEK bindings without explicit user approval and a confirmed rollback plan — key operations can cause irreversible data loss.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-secret-kms-lifecycle-steward",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-security-posture-hardening/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-security-posture-hardening
 description: Review GCP security posture via Security Command Center findings, CIS GCP Benchmark gaps, org policy enforcement baseline, Assured Workloads controls, Binary Authorization, and CSPM recommendations. Prefer gcp-iam-least-privilege-review for IAM binding surgery and gcp-vpc-service-controls-architect for VPC-SC perimeter design unless the request is primarily broad posture hardening.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: security

package/skills/gcp/gcp-security-posture-hardening/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Prefer read-only inspection. Do not modify SCC findings, org policies, or Binary Authorization policies without explicit user approval and grounding in sanitized evidence.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-security-posture-hardening",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-serverless-production-readiness/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-serverless-production-readiness
 description: Review Cloud Run and Cloud Functions gen2 for production readiness — min-instances cold start, memory and CPU allocation, VPC connector configuration, Secret Manager injection, CMEK encryption, concurrency limits, and traffic splitting safety.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: platform

package/skills/gcp/gcp-serverless-production-readiness/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Cloud Run service accounts must follow least privilege — avoid binding roles/editor or roles/owner. Secrets in environment variables appear in plaintext in Cloud Run revision metadata accessible to anyone with run.revisions.get — always use Secret Manager references. Cloud Run with --allow-unauthenticated is public to the internet — require authentication for all non-public endpoints.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-serverless-production-readiness",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-solution-architect/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-solution-architect
 description: Design GCP solutions aligned with the Google Cloud Architecture Framework when the request spans resource hierarchy, product selection, or multi-service architecture decisions. Prefer narrower GCP skills for single-domain network, GKE, Cloud Run, data pipeline, database, or landing zone asks.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: platform

package/skills/gcp/gcp-solution-architect/metadata.json

@@ -21,6 +21,6 @@
   "security_notes": "Do not approve a GCP architecture without resource hierarchy, IAM, network exposure, data protection, observability, recovery, and cost evidence. Label unknowns instead of pretending the diagram is proof.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-solution-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-spanner-architect/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-spanner-architect
 description: Design Cloud Spanner schemas with hotspot avoidance, interleaving strategies, optimal indexing, processing-unit sizing, and global write patterns for distributed OLTP at scale.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-08"
   category: data

package/skills/gcp/gcp-spanner-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Monotonically increasing keys (e.g., auto-increment integers) cause all writes to hit the same split — use UUIDs or bit-reversed sequential IDs. Over-indexing in Spanner is expensive and slows writes — every indexed column is replicated.",
   "last_verified": "2026-05-08",
   "path": "skills/gcp/gcp-spanner-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-support-incident-coordinator/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-support-incident-coordinator
 description: Coordinate GCP support incidents — case creation with correct severity, Premium/Enhanced Support SLA enforcement, TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: observability

package/skills/gcp/gcp-support-incident-coordinator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "GCP support case attachments are accessible to Google support engineers — never attach files containing customer PII, credentials, or unredacted production logs. Premium Support SLA is contractual — document SLA breach timestamps with case numbers for potential SLA credits.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-support-incident-coordinator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/gcp/gcp-ticket-triage-escalation-coordinator/SKILL.md

@@ -3,7 +3,7 @@ name: gcp-ticket-triage-escalation-coordinator
 description: Triage GCP operational alerts, incidents, and support tickets — P0/P1/P2/P3 classification, GCP Premium/Enhanced Support SLA enforcement, war room coordination, evidence collection from Cloud Monitoring and Cloud Logging, and safe escalation paths.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-09"
   category: observability

package/skills/gcp/gcp-ticket-triage-escalation-coordinator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "GCP support tickets may require sharing sanitized logs or configuration — scrub project IDs, IP addresses, and customer data before sharing with Google support. War room communication channels must be secure — use dedicated incident Slack/Meet channels, not public ones.",
   "last_verified": "2026-05-09",
   "path": "skills/gcp/gcp-ticket-triage-escalation-coordinator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }