@raishin/vanguard-frontier-agentic 3.6.0 → 3.7.0

package/skills/python/python-free-threading-parallelism/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads application source, build configuration, and native-extension manifests to assess free-threaded (no-GIL) readiness; never builds, installs, or runs the free-threaded interpreter or an extension against it. A claim about an actual race, speedup, or extension crash under free-threading is flagged as needing confirmation on a real free-threaded build. Never requests credentials or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-free-threading-parallelism",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-language-contracts-typing/SKILL.md

@@ -3,7 +3,7 @@ name: python-language-contracts-typing
 description: "Use this skill to statically review Python type contracts and gradual typing: Any propagation across public boundaries, Protocol and structural typing, generics and variance soundness, overload consistency, TypedDict and dataclass contracts, and the separation of static typing from runtime validation. Reads source and type-checker config only; it never runs the checker or the code."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-language-contracts-typing/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads Python source, type annotations, and type-checker configuration to assess type-contract soundness; never runs mypy/Pyright or the code to observe a checker result or a runtime type error. A claim about what a checker reports is flagged as needing the user's actual checker output rather than asserted. Never requests secrets, credentials, or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-language-contracts-typing",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-change-plan/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-change-plan
 description: "Use this skill to produce a normalized change plan — an exact diff, a pre-approved rollback procedure, machine-checkable verification criteria, and a stable action digest — bound to an exact target. Read-only-runtime: it holds no production credentials and executes nothing."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-live-change-plan/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: produces change plans, diffs, rollback procedures, verification criteria, and action digests from supplied artifacts only; holds no production credentials and executes nothing. Emits an audit event for every plan produced, never uses shared or standing credentials, never retrieves raw secret values, and redacts personally identifiable fields from any artifact quoted in the plan.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-change-plan",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-code-remediation/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-code-remediation
 description: "Use this skill to create a branch and pull request for a bounded code/dependency remediation and run approved isolated (non-production) validation against it. Mutating-runtime: it can never merge, deploy, or weaken a policy, gate, or test."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: devsecops

package/skills/python/python-live-code-remediation/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime, limited to creating a branch/pull request and running approved isolated non-production validation: never merges, deploys, or weakens a policy/gate/test. Emits an audit event for every branch/PR creation and validation result, never uses shared or standing credentials, never retrieves raw secret values, and redacts personally identifiable fields from any artifact quoted in the PR. Requires an external, target-bound approval, target-scoped just-in-time credentials, and a pre-approved rollback (revert) before creating the branch/PR or running validation.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-code-remediation",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-continuous-control-testing/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-continuous-control-testing
 description: "Use this skill to periodically test whether previously operating controls continue to operate, read-only by default. It runs the continuous-control checklist, opens a finding with a named owner and due date for each failure, and distinguishes a single passing observation from continuing operating effectiveness."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: compliance

package/skills/python/python-live-continuous-control-testing/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime by default: tests whether controls continue operating and opens findings with named owners and due dates; never mutates or silently remediates a production failure. Emits an immutable audit event for every observation; never uses shared or standing credentials; never retrieves raw secret values; redacts PII in captured evidence.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-continuous-control-testing",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-control-evidence/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-control-evidence
 description: "Use this skill to collect, hash, and seal control evidence to an approved, access-controlled, retention-managed destination and map it to controls as candidate support. It captures evidence quality dimensions, applies redaction/tokenization and retention/legal-hold, and never asserts a control is effective or a framework is satisfied."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: compliance

package/skills/python/python-live-control-evidence/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: collects, hashes, and seals control evidence to an approved destination and maps it to controls; never mutates a live system, approves, or executes. Emits an immutable audit event for every observation; never uses shared or standing credentials; never retrieves raw secret values; redacts and tokenizes PII/sensitive fields before sealing, and never persists secrets.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-control-evidence",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-data-change-control/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-data-change-control
 description: "Use this skill to govern a migration, backfill, pipeline reprocessing, or bounded data correction against a live system: confirm data ownership sign-off, data classification, a bounded record/partition scope, a reconciliation plan, and a rollback before acting, then require reconciliation evidence and apply data-minimization/residency controls to captured evidence. It never allows an unbounded or ad-hoc production data mutation."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: database

package/skills/python/python-live-data-change-control/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime: executes an approved, bounded migration, backfill, pipeline reprocessing, or data correction. Emits an immutable audit event for every observation and action; never uses shared or standing credentials — only target-scoped, time-bound JIT credentials; never retrieves raw secret values; redacts and tokenizes PII/regulated fields in captured evidence. Requires an external signed approval bound to the exact target and plan digest, JIT credentials, a pre-approved rollback, and reconciliation evidence before any action, and acts on exactly one bounded record/partition scope per approval — never an unbounded or expanded scope.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-data-change-control",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-exception-governance/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-exception-governance
 description: "Use this skill to record and review a policy exception: confirm a named owner distinct from the requester, an explicit scope, an expiration date, compensating controls, and a review date, refuse to approve its own exception, and automatically flag expired or incomplete exceptions as findings."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: compliance

package/skills/python/python-live-exception-governance/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: records and reviews policy exceptions and flags expired or incomplete ones; never approves, executes, or mutates a live system. Emits an immutable audit event for every observation; never uses shared or standing credentials; never retrieves raw secret values; redacts PII in captured evidence.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-exception-governance",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-governance-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-governance-maestro
 description: "Use this skill to classify a Python live-control-plane task by runtime, business process, data class, environment, and control profile, and route it to the narrowest live specialist (read-only-runtime or mutating-runtime), or to gate a mutating request to a named human owner under live-guard-gate. Routing only — never mutates, approves, or declares compliance."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-live-governance-maestro/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Read-only-runtime: classifies and routes only, never mutates, approves, or executes anything itself. Emits an audit event for every routing decision, never uses shared or standing credentials, never retrieves raw secret values, and redacts personally identifiable fields from any task text or artifact it classifies.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-governance-maestro",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-identity-authority/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-identity-authority
 description: "Use this skill to confirm active identity, role, credential age, target scope, JIT status, and approval authority before any gated live action. Read-only-runtime: it blocks shared identities, unidentified principals, standing administrative credentials, and requester-as-approver conflicts, but never grants, elevates, or approves anything itself."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: security

package/skills/python/python-live-identity-authority/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: verifies identity, credential currency, JIT scope, and approval authority via allowlisted identity/access queries only; never grants, elevates, or approves an action itself. Emits an audit event for every verification, never uses shared or standing credentials, never retrieves raw secret values or credential material, and redacts personally identifiable fields from captured evidence.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-identity-authority",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-job-control/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-job-control
 description: "Use this skill to operate a distributed job or business-automation process (retry, requeue, run): confirm both technical and business idempotency before acting, bound every retry instead of blindly retrying all failed jobs, and reconcile the actual business outcome rather than accepting the job's own success status."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: messaging

package/skills/python/python-live-job-control/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime: operates an approved, bounded distributed job or business-automation retry/requeue. Emits an immutable audit event for every observation and action; never uses shared or standing credentials — only target-scoped, time-bound JIT credentials; never retrieves raw secret values; redacts PII in captured evidence. Requires an external signed approval bound to the exact target and plan digest, JIT credentials, a pre-approved rollback, and business-outcome reconciliation before any action, and acts on exactly one bounded job/retry scope per approval — never a blind mass-retry or expanded scope.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-job-control",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-model-promotion-control/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-model-promotion-control
 description: "Use this skill to promote exactly one immutable model artifact: confirm the artifact's provenance and integrity (hash/signature), an AI-risk classification, evaluation evidence matched to the deployment, live monitoring, and a rollback to the prior artifact before promoting, and record the AI-system role without declaring regulatory conformity."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: ai

package/skills/python/python-live-model-promotion-control/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime: promotes exactly one immutable, integrity-verified model artifact per approval. Emits an immutable audit event for every observation and action; never uses shared or standing credentials — only target-scoped, time-bound JIT credentials; never retrieves raw secret values; redacts PII in captured evidence. Requires an external signed approval bound to the exact target and plan digest, JIT credentials, a pre-approved rollback to the prior artifact, and evaluation/monitoring reconciliation before any action, and acts on exactly one bounded artifact-promotion scope per approval — never multiple artifacts or an expanded scope.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-model-promotion-control",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-policy-gate/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-policy-gate
 description: "Use this skill to evaluate a versioned, machine-readable policy bundle and control applicability against a live action's recorded inputs, producing candidate control results. Read-only-runtime: it cannot create an exception or an approval."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: compliance

package/skills/python/python-live-policy-gate/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: evaluates the versioned policy bundle and applicability inputs to produce candidate control results only; never creates an exception or an approval. Emits an audit event recording the policy_bundle_version for every evaluation, never uses shared or standing credentials, never retrieves raw secret values, and redacts personally identifiable fields from evaluation inputs.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-policy-gate",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-release-control/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-release-control
 description: "Use this skill to execute exactly one bounded release, canary increment, rollback, or single-instance restart under mutating-runtime controlled execution: confirm an independent approval bound to the plan digest and target, target-scoped JIT credentials, a captured before-state, and a pre-approved rollback exist before acting, then capture the after-state and route verification to an independent check. It never executes a fleet-wide or unbounded change and never self-attests success."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: delivery

package/skills/python/python-live-release-control/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime: executes exactly one bounded release, canary increment, rollback, or single-instance restart per independent approval. Emits an immutable audit event for every observation and action; never uses shared or standing credentials — only target-scoped, time-bound JIT credentials; never retrieves raw secret values; redacts PII in captured evidence. Requires an external signed approval bound to the exact target and plan digest, JIT credentials, a pre-approved rollback, and reconciliation before any action, and acts on exactly one bounded scope per approval — never a fleet-wide, unbounded, or expanded scope.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-release-control",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-rollback-and-recovery/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-rollback-and-recovery
 description: "Use this skill to execute only a previously approved, tested rollback procedure against the exact affected target. It confirms rollback authority and a captured before-state/snapshot reference exist before acting, then captures and reconciles the post-rollback state through an independent check. It never improvises a rollback during an active failure."
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: resilience

package/skills/python/python-live-rollback-and-recovery/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Mutating-runtime: executes only a previously approved, tested rollback procedure against the exact affected target. Emits an immutable audit event for every observation and action; never uses shared or standing credentials — only target-scoped, time-bound JIT credentials; never retrieves raw secret values; redacts PII in captured evidence. Requires an external signed approval bound to the exact affected target, JIT credentials, confirmation the rollback procedure was itself pre-approved and tested, and post-rollback reconciliation before executing, and acts on exactly one bounded affected-target scope per approval — never an improvised rollback or an additional target.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-rollback-and-recovery",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-runtime-control/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-runtime-control
 description: "Use this skill to read live Python interpreter, process, worker, task, thread, memory, and health state through allowlisted read-only diagnostics, and to flag health signals as findings. Read-only-runtime: it never restarts, kills, scales, or reconfigures a process."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: observability

package/skills/python/python-live-runtime-control/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: captures interpreter, process, worker, thread, memory, and health state via allowlisted read-only diagnostics only (sys, gc, faulthandler) and never restarts, kills, scales, or reconfigures a process. Emits an audit event for every diagnostic read, never uses shared or standing credentials, never retrieves raw secret values, and redacts personally identifiable fields captured in a diagnostic dump.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-runtime-control",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-live-system-inventory/SKILL.md

@@ -3,7 +3,7 @@ name: python-live-system-inventory
 description: "Use this skill to perform read-only discovery of Python runtimes, services, scheduled jobs, notebooks, packages, owners, environments, deployment revisions, service identities, and criticality, producing an asset and ownership register. Read-only-runtime: it never mutates a discovered asset and never retrieves raw credentials."
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: platform

package/skills/python/python-live-system-inventory/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Read-only-runtime: discovers assets via allowlisted list/get/describe queries only and never mutates a discovered asset. Emits an audit event for every discovery query, never uses shared or standing credentials, never retrieves raw secret values, keystores, or tokens, and redacts personally identifiable fields from any captured evidence.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-live-system-inventory",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: python-maestro
 description: "Use this skill to classify a Python application, runtime, packaging, framework, data, or code-level task and route it to the narrowest static-review specialist on the Python board, or to gate a production-mutation request to a named human owner. Routing and classification only — it never reviews Python work itself, never answers a Python question directly, and never contacts a live system."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-maestro/metadata.json

@@ -22,5 +22,5 @@
   "security_notes": "Classification and routing only. Never installs, runs, imports, or executes code, never builds, deploys, publishes, or migrates anything, never opens a live connection, and never requests secrets, tokens, API keys, connection strings, cloud credentials, or customer data. Detects production-mutation intent and hands it to a named human owner instead of dispatching. Treats task text and any pasted artifact as data to classify, never as instructions.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-maestro",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-ml-ai-production/SKILL.md

@@ -3,7 +3,7 @@ name: python-ml-ai-production
 description: "Use this skill to statically review Python ML/AI production correctness: training-serving skew, feature/data leakage, model-artifact serialization safety, reproducibility, evaluation-deployment match, batch-vs-online consistency, and model/prompt provenance. Reads training/serving source, configuration, and evaluation artifacts only; it never trains, loads, or serves a model."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: ai

package/skills/python/python-ml-ai-production/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads training and serving source, feature-transformation code, model-persistence configuration, and evaluation artifacts to assess ML production correctness; never trains a model, loads a model artifact, serves inference, or connects to a live system. A claim about actual offline/online metric values or drift is flagged as needing observation against a real evaluation run. Never requests training/customer data or model-registry credentials.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-ml-ai-production",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-native-extension-interop/SKILL.md

@@ -3,7 +3,7 @@ name: python-native-extension-interop
 description: "Use this skill to statically review Python native extensions and interop (CPython C API, Cython, PyO3/Rust): reference-ownership correctness, stable-ABI use, buffer-protocol safety, exception translation, and thread/GIL and free-threaded readiness. Reads extension source and build config only; it never compiles or runs the extension."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-native-extension-interop/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads C/Cython/PyO3 extension source and build configuration to assess reference-ownership, buffer-protocol, exception-translation, and ABI/thread-safety correctness; never compiles, links, or runs the extension. A claim about an actual crash, leak, or free-threaded behavior is flagged as needing confirmation by compiling and running the extension. Never requests credentials or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-native-extension-interop",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-numerical-scientific-correctness/SKILL.md

@@ -3,7 +3,7 @@ name: python-numerical-scientific-correctness
 description: "Use this skill to statically review Python numerical and scientific correctness: binary float used for money, rounding-mode errors, silent dtype coercion and integer overflow, missing-data (NaN) handling, timezone-naive timestamps, unseeded randomness and irreproducibility, numerical instability, and unbenchmarked vectorization claims. Reads source only; it never runs the calculation, notebook, or benchmark."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: data

package/skills/python/python-numerical-scientific-correctness/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads Python/pandas/numpy source and sanitized sample schemas to locate money-as-float, rounding, dtype-coercion, timezone, and reproducibility defects; never runs the calculation, notebook, or benchmark and never observes an actual numeric result or timing. A claim about a computed value or a performance improvement is flagged as needing execution/benchmark evidence rather than asserted. Never requests production data or a live database/warehouse connection.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-numerical-scientific-correctness",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-observability-sre/SKILL.md

@@ -3,7 +3,7 @@ name: python-observability-sre
 description: "Use this skill to statically review in-application Python observability: structured logs, metrics, traces, context propagation and correlation, error taxonomy, metric/label cardinality, PII exposure, and SLO-supporting instrumentation. Reads application instrumentation code only; it routes collector, exporter, and dashboard infrastructure to the platform boards."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: observability

package/skills/python/python-observability-sre/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads application instrumentation code (logging, metrics, and tracing calls) and telemetry configuration to assess observability correctness and safety; never runs the application, connects to a live telemetry backend, or emits telemetry itself. A claim about actual cardinality, cost, or trace completeness is flagged as needing observation against a real backend. Never requests telemetry-backend credentials or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-observability-sre",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-packaging-supply-chain/SKILL.md

@@ -3,7 +3,7 @@ name: python-packaging-supply-chain
 description: "Use this skill to statically review Python packaging and software supply-chain integrity: pyproject build metadata, dependency locking and hash-checking, index trust and dependency confusion, build isolation, dependency specifiers, license metadata, and CI release-token exposure. Reads manifests and lockfiles only; it never installs packages, resolves environments, or contacts an index."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: devsecops

package/skills/python/python-packaging-supply-chain/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads `pyproject.toml`, `requirements`/constraints files, lockfiles, and CI definitions to assess locking, hashing, index trust, and build-isolation posture; never runs `pip install`, never resolves or downloads a package, and never contacts an index. A claim that a specific version is vulnerable is flagged as needing confirmation against an advisory source rather than asserted. Never requests index credentials, publish tokens, or customer data, and never installs an unreviewed package to inspect it.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-packaging-supply-chain",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-performance-memory/SKILL.md

@@ -3,7 +3,7 @@ name: python-performance-memory
 description: "Use this skill to statically review Python performance and memory claims: CPU profiling vs benchmarking rigor, memory growth and allocation patterns, GC pressure, algorithmic complexity, and serialization/import/startup cost. Reads source, profiles, and benchmark artifacts only; it never runs the profiler or benchmark itself."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: architecture

package/skills/python/python-performance-memory/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads source, profiler output (cProfile), benchmark artifacts (timeit/pytest-benchmark), and tracemalloc snapshots to assess performance and memory claims; never runs the profiler, the benchmark, or the application itself. A claim about actual latency, throughput, or memory growth with no supplied profile/benchmark/tracemalloc evidence is flagged as unsupported rather than accepted. Never requests credentials or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-performance-memory",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-testing-quality-engineering/SKILL.md

@@ -3,7 +3,7 @@ name: python-testing-quality-engineering
 description: "Use this skill to statically review Python test-suite quality (pytest, hypothesis): fixture scope and isolation, mock misuse and wrong-target patching, control of time/randomness/environment, flakiness sources, assertion quality, coverage theater, async-test correctness, and property-based-testing signal. Reads test and source code only; it never runs the suite or measures coverage."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: delivery

package/skills/python/python-testing-quality-engineering/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads test code, fixtures, and the code under test to assess whether the suite reduces risk; never runs pytest, executes a test, or measures coverage. A claim about a test's actual pass/fail, coverage number, or flakiness rate is flagged as needing execution by the user. Never requests secrets, credentials, or customer data.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-testing-quality-engineering",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/python/python-web-service-production-readiness/SKILL.md

@@ -3,7 +3,7 @@ name: python-web-service-production-readiness
 description: "Use this skill to statically review Python web-service production readiness across FastAPI, Starlette, Django, and Flask (ASGI/WSGI): sync-vs-async endpoint blocking, request validation, authentication and authorization boundaries, middleware order, worker model, timeouts, graceful shutdown, and health checks. Reads source and config only; it never starts the server or sends requests. Loads the framework-specific reference only when the framework is detected."
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-07-26"
   category: platform

package/skills/python/python-web-service-production-readiness/metadata.json

@@ -23,5 +23,5 @@
   "security_notes": "Static review only — reads web-framework source, route and middleware definitions, and sanitized configuration to assess production readiness; never starts the server, sends a request, or observes runtime latency, worker behavior, or shutdown timing. A claim about actual request-handling or shutdown behavior is flagged as needing runtime confirmation. Never requests secrets, credentials, or a live connection. Framework-specific reference is loaded only when the framework is detected.",
   "last_verified": "2026-07-26",
   "path": "skills/python/python-web-service-production-readiness",
-  "author": "github: Raishin"
+  "author": "github: VincentChuWaiChow"
 }

package/skills/qa/ci-test-pipeline-review/SKILL.md

@@ -3,7 +3,7 @@ name: ci-test-pipeline-review
 description: Use this skill when reviewing how a CI pipeline runs tests — gating, sharding, parallelism, fail-fast behavior, artifact retention, and flaky-test quarantine wiring. Trigger when a user provides a CI workflow file (GitHub Actions, GitLab CI, CircleCI, Jenkins), asks why CI is slow or unreliable as a merge gate, or wants to know whether their test pipeline actually blocks bad merges. This skill reviews CI configuration statically; it does not trigger or run pipelines.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-17"
   category: delivery

package/skills/qa/ci-test-pipeline-review/metadata.json

@@ -16,6 +16,6 @@
   "security_notes": "Static review only — reads CI workflow and branch-protection configuration, never triggers or runs pipelines. Flags secret exposure to test jobs on pull_request_target or fork PRs. Never request or accept CI secrets, deploy keys, or registry tokens; ask for sanitized workflow files.",
   "last_verified": "2026-05-17",
   "path": "skills/qa/ci-test-pipeline-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/qa/helm-chart-quality-review/SKILL.md

@@ -3,7 +3,7 @@ name: helm-chart-quality-review
 description: Use this skill when a user provides a Helm chart or asks to review Helm chart quality, security, or testability — including Chart.yaml, values.yaml, templates/, tests/, or chart-testing CI configuration.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-17"
   category: delivery

package/skills/qa/helm-chart-quality-review/metadata.json

@@ -18,6 +18,6 @@
   "security_notes": "Static review only — reads chart source files (Chart.yaml, values.yaml, templates/, tests/), never installs a chart, never connects to a Kubernetes cluster, never requests kubeconfig, cluster credentials, or cloud provider credentials. Do not accept values files containing live credentials, connection strings, or tenant IDs; ask for sanitized versions with placeholder values.",
   "last_verified": "2026-05-17",
   "path": "skills/qa/helm-chart-quality-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/qa/kubernetes-manifest-quality-review/SKILL.md

@@ -3,7 +3,7 @@ name: kubernetes-manifest-quality-review
 description: Use this skill when the user provides raw Kubernetes YAML manifests or asks to review K8s manifests for quality, security, or policy compliance — covering Deployment, StatefulSet, DaemonSet, Service, Ingress, NetworkPolicy, RBAC, and CRD resources.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-17"
   category: delivery

package/skills/qa/kubernetes-manifest-quality-review/metadata.json

@@ -18,6 +18,6 @@
   "security_notes": "Static review only — reads manifest YAML files, never applies manifests to a cluster, never connects to the Kubernetes API, and never requests kubeconfig, service account tokens, or cloud credentials. Do not accept manifests containing real secret values or connection strings decoded from base64; ask for sanitized versions with placeholder values.",
   "last_verified": "2026-05-17",
   "path": "skills/qa/kubernetes-manifest-quality-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/qa/llm-ai-pipeline-test-review/SKILL.md

@@ -3,7 +3,7 @@ name: llm-ai-pipeline-test-review
 description: Use this skill when reviewing how an LLM or AI pipeline is evaluated — metric selection, golden datasets, threshold governance, adversarial coverage, and regression gating — to determine whether low-quality or unsafe model outputs can ship undetected. Trigger when a user provides evaluation configuration files, DeepEval or RAGAS test scripts, eval CI steps, or asks whether their AI pipeline actually prevents a bad model from reaching production. This skill reviews evaluation setup statically; it does not call LLM APIs, run evaluations, or contact inference endpoints.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-17"
   category: ai

package/skills/qa/llm-ai-pipeline-test-review/metadata.json

@@ -18,6 +18,6 @@
   "security_notes": "Static review only — reads eval configuration and test source; never calls LLM APIs, never runs evaluations, never requests model API keys or inference endpoints. Do not accept eval fixtures containing real user PII, private prompt chains, or model weights; ask for sanitized configurations.",
   "last_verified": "2026-05-17",
   "path": "skills/qa/llm-ai-pipeline-test-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/qa/playwright-e2e-execution-run/SKILL.md

@@ -3,7 +3,7 @@ name: playwright-e2e-execution-run
 description: Use this skill when an operator wants to actually execute an existing Playwright end-to-end suite against a confirmed non-production target and receive a structured, attested run report — pass/fail counts, flaky tests, durations, and trace artifacts. Trigger when the user asks to "run the e2e suite", "execute the Playwright tests against staging", or hands the agent a Playwright project plus a target base URL. This is the live-execution counterpart to the static-review skill `playwright-e2e-suite-review`. Default mode is static and runs nothing; runtime execution is a per-session opt-in that requires explicit target confirmation.
 allowed-tools: Read Grep Glob Bash(npx playwright test*) Bash(npx playwright install*) Bash(npx playwright show-report*)
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-17"
   category: delivery

package/skills/qa/playwright-e2e-execution-run/metadata.json

@@ -19,6 +19,6 @@
   "category": "delivery",
   "lifecycle": "experimental",
   "execution_tier": "read-only-runtime",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }