@raishin/vanguard-frontier-agentic 3.6.0 → 3.7.0

package/skills/sap/sap-live-readonly-identity-trust-discovery/SKILL.md

@@ -3,7 +3,7 @@ name: sap-live-readonly-identity-trust-discovery
 description: Inspect SAP Cloud Identity Services (IAS/IPS), BTP trust and federation configuration, XSUAA role collections, and identity provider settings using read-only list, get, describe, and export operations only. Use when read-only discovery of IAS application assignments, IPS connector configuration, XSUAA role collection assignments, corporate identity provider federation, or BTP trust configurations is needed as evidence for advisory, audit, or compliance purposes. Requires pre-authorized read-only credentials. Never creates, updates, deletes, assigns, rotates, modifies trust, or triggers any mutation.
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: security

package/skills/sap/sap-live-readonly-identity-trust-discovery/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Read-only enforced. Never request or accept write-capable credentials. Use IAS read-only API user, IPS read-only connector viewer, XSUAA subaccount viewer, or BTP security auditor roles only. Redact all credential values, client secrets, OAuth tokens, IAS technical user passwords, IPS system user credentials, and personal user data beyond the minimum necessary from output. Log every command executed. Refuse any request that maps to a create/update/delete/assign/rotate/import/trigger/modify-trust action. Personal data encountered during IAS or IPS enumeration must be minimized and redacted beyond audit necessity.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-live-readonly-identity-trust-discovery",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental",
   "execution_tier": "read-only-runtime"

package/skills/sap/sap-live-readonly-landscape-discovery/SKILL.md

@@ -3,7 +3,7 @@ name: sap-live-readonly-landscape-discovery
 description: Enumerate and export SAP BTP and S/4HANA landscape configuration using read-only list, get, describe, and export operations only. Use when read-only discovery of subaccounts, service instances, entitlements, destinations, ABAP system landscape objects, or transport routes is needed as evidence for advisory, audit, or compliance purposes. Requires pre-authorized read-only credentials. Never creates, updates, deletes, deploys, assigns, rotates, imports, or triggers any change.
 allowed-tools: Read Grep Glob WebSearch WebFetch Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: platform

package/skills/sap/sap-live-readonly-landscape-discovery/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Read-only enforced. Never request or accept write-capable credentials. Use viewer/auditor roles only (BTP subaccount viewer, CF SpaceAuditor/OrgAuditor, kubectl read-only ClusterRole, ABAP display user). Redact all credential values, service keys, and OAuth tokens from output. Log every command executed. Refuse any request that maps to a create/update/delete/deploy/assign/rotate/import/trigger action.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-live-readonly-landscape-discovery",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental",
   "execution_tier": "read-only-runtime"

package/skills/sap/sap-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: sap-maestro
 description: Route SAP AI workflow requests to the correct domain skill using taxonomy classification, a routing table, and dispatch mode selection. Use when an incoming request spans multiple SAP domains (BTP, S/4HANA, SuccessFactors, Ariba, etc.) and the correct downstream skill or agent must be identified before any action is taken. Does not touch live systems.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: platform

package/skills/sap/sap-maestro/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "This skill is a pure routing layer and does not access any live SAP system. It must not accept or propagate credentials, tenant IDs, system URLs, or user tokens. Routing decisions that target live-tier skills must pass through the live-guard gate before dispatch is proposed.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-maestro",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-manufacturing-execution-risk-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-manufacturing-execution-risk-review
 description: Review SAP manufacturing execution risk across SAP PP (Production Planning), S/4HANA Manufacturing, and Digital Manufacturing (DM/MES): production order governance, capacity planning and scheduling controls, MRP exception management, shop-floor integration quality, quality management integration controls, backflush and goods movement governance, and manufacturing execution exceptions. Flags control gaps in production order authorization, uncontrolled backflush paths, MRP exception backlogs, quality integration bypass risks, and shop-floor traceability failures. Does not release production orders, post goods movements, confirm operations, or mutate any live manufacturing or MES system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: operational

package/skills/sap/sap-manufacturing-execution-risk-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP PP systems, SAP S/4HANA Manufacturing systems, SAP Digital Manufacturing (DM/MES) systems, SAP QM systems, Fiori launchpads, SAP GUI sessions, or any production manufacturing or MES database. Accepts only user-provided configuration exports, production order status reports, MRP exception aging reports, capacity utilization summaries, QM inspection lot reports, shop-floor integration status exports, or written descriptions of the manufacturing execution landscape. Never request or accept SAP logon credentials, RFC connection details, DM/MES API credentials, or direct manufacturing database access. Never releases production orders, confirms operations, posts goods movements, processes quality usage decisions, or modifies BOM or routing records. Quality hold bypass findings in regulated manufacturing environments must be escalated to the quality manager, regulatory affairs team, and internal audit team immediately.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-manufacturing-execution-risk-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-mdg-master-data-quality-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-mdg-master-data-quality-review
 description: Review SAP Master Data Governance (MDG) configuration and data quality posture: data models and entity types, validation and derivation rules, governance workflow design, consolidation and mass processing configuration, data quality KPI dashboards, and key mapping setup. Flags governance gaps, mis-configured validation rules, workflow bottlenecks, and data quality KPI blind spots. Does not create, modify, or approve master data records.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: data

package/skills/sap/sap-mdg-master-data-quality-review/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Does not access live SAP MDG systems, S/4HANA backends, Fiori launchpads, BRFplus runtimes, or replication target systems. Accepts only user-provided BRFplus rule exports, workflow configuration summaries, data model documents, KPI dashboard descriptions, key mapping configuration notes, or written descriptions of the MDG landscape. Never request or accept SAP logon credentials, MDG admin access, or RFC connection details. Never creates, modifies, approves, rejects, or activates any master data change request, consolidation object, or governance workflow step. Mass change template execution is explicitly out of scope.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-mdg-master-data-quality-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-order-to-cash-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-order-to-cash-review
 description: Review SAP S/4HANA Order-to-Cash (OTC) processes: order management configuration, pricing procedure design, credit management controls, billing and revenue recognition, order and delivery blocks and holds, fulfillment exception management, Days Sales Outstanding (DSO) drivers, and cash application. Flags control gaps, revenue leakage patterns, pricing errors, unresolved order blocks, credit management weaknesses, and DSO drivers. Does not create sales orders, release order blocks, post billing documents, or mutate any live OTC system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: finance

package/skills/sap/sap-order-to-cash-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP S/4HANA Sales (SD) systems, SAP S/4HANA Finance (FI) systems, Fiori launchpads, SAP GUI sessions, or any production OTC database. Accepts only user-provided configuration descriptions, order block aging reports, billing schedule adherence reports, pricing procedure documentation, credit management summaries, DSO analytics, dispute management reports, dunning procedure documentation, or written descriptions of the OTC landscape. Never request or accept SAP logon credentials, RFC connection details, or direct database access. Never creates, modifies, releases, or cancels sales orders, delivery documents, billing documents, customer credit limits, or customer payments. Revenue fraud indicators (unauthorized pricing at zero, material unbilled delivery backlog) must be escalated to the audit and finance team — this skill does not approve transactions or close audit findings.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-order-to-cash-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-procurement-ariba-value-leakage-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-procurement-ariba-value-leakage-review
 description: Review SAP Ariba and SAP S/4HANA source-to-pay processes for value leakage: maverick and off-contract spend, contract compliance rates, supplier risk exposure, three-way match exceptions (invoice/PO/GR), early payment discount capture, and guided buying adoption. Flags leakage patterns, control gaps in procurement compliance, supplier risk blind spots, and discount capture failures. Does not create purchase orders, approve invoices, or mutate any live procurement system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: finance

package/skills/sap/sap-procurement-ariba-value-leakage-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP Ariba tenants, SAP Ariba Network, SAP S/4HANA Procurement systems, Fiori launchpads, or any production procurement database. Accepts only user-provided configuration descriptions, spend analysis exports, contract compliance reports, three-way match exception reports, supplier risk summaries, discount capture rate data, guided buying adoption metrics, or written descriptions of the source-to-pay landscape. Never request or accept SAP Ariba login credentials, API keys, or direct database access. Never creates, approves, or modifies purchase requisitions, purchase orders, contracts, invoices, supplier records, or payment runs. Three-way match bypass findings and supplier payments to potentially sanctioned parties must be escalated to the compliance and audit team — this skill does not approve payments or close compliance findings.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-procurement-ariba-value-leakage-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-procurement-license-finops-vendor-protocol/SKILL.md

@@ -3,7 +3,7 @@ name: sap-procurement-license-finops-vendor-protocol
 description: Cross-functional coordination protocol governing handoff contracts between SAP Procurement/License, FinOps, and Vendor Management. Activates on BTP consumption spikes, entitlement changes, license compliance events, RISE/SLA issues, vendor lock-in exposure, contractual risk, underused subscriptions, and over-provisioned services. Advisory and audit only — no live mutation.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: finops

package/skills/sap/sap-procurement-license-finops-vendor-protocol/metadata.json

@@ -29,7 +29,7 @@
   "security_notes": "This protocol accepts only user-supplied evidence artifacts. Never accept or store raw contract pricing, supplier margins, or commercial unit prices. All evidence must be redacted of PII, OAuth tokens, service keys, API credentials, SAP contract IDs, and tenant IDs before processing. This protocol does not invoke any guarded-mutating operator gate. All irreversible actions require named human approval before a handoff package is submitted to an operator.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-procurement-license-finops-vendor-protocol",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-release-change-collision-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-release-change-collision-review
 description: Review SAP release and change management for collision risk: transport sequencing and dependency analysis, overtake and overwrite risk between parallel tracks, parallel project conflict detection, retrofit strategy and dual landscape governance, downgrade protection assessment, and ChaRM and SAP Cloud ALM change governance completeness. Advisory only — does not import transports, modify transport requests, or mutate change management configuration.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: delivery

package/skills/sap/sap-release-change-collision-review/metadata.json

@@ -25,7 +25,7 @@
   "security_notes": "Does not connect to any SAP system, access STMS transport queues, execute transport imports, or mutate ChaRM or Cloud ALM change management records. Accepts only user-provided transport sequencing plans, import queue descriptions, collision analysis outputs, ChaRM change record summaries, landscape architecture diagrams, retrofit transport lists, and downgrade protection configuration descriptions. Never accept SAP system credentials, RFC destination parameters, ChaRM API tokens, Cloud ALM admin credentials, or production transport request contents. Does not authorize production transport releases or emergency change approvals — those decisions belong to the customer change authority board.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-release-change-collision-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-release-cutover-finance-controls-protocol/SKILL.md

@@ -3,7 +3,7 @@ name: sap-release-cutover-finance-controls-protocol
 description: Cross-functional coordination protocol governing handoffs between SAP Release Management, Business Process Owners, and Finance Controls for transport imports, production freeze enforcement, cutover readiness, financial-period close, O2C/P2P business process continuity, inventory valuation, revenue recognition impact, and hypercare. Defines go/no-go decision rights, irreversible-action gates, rollback requirements, and audit packaging. Never mutates live systems and never bypasses any guarded-mutating gate.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: compliance

package/skills/sap/sap-release-cutover-finance-controls-protocol/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Does not access live SAP production systems, transport management organizers, financial configuration, or FICO posting period settings. Accepts only user-provided transport manifests, QA import results, readiness checklist outputs, financial impact assessments, and incident records. Never accepts production system credentials, transport import passwords, or RFC connection details. All transport imports must route through sap-guarded-transport-import-operator-agent with complete written approval documentation. Period-sensitive financial configuration changes require Finance Controls and CFO written approval before execution. No guarded-mutating gate is bypassed by this protocol.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-release-cutover-finance-controls-protocol",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-rise-sla-vendor-risk-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-rise-sla-vendor-risk-review
 description: Advisory review of RISE with SAP and SAP cloud service contracts for SLA and vendor risk: responsibility split between SAP, customer, and partner; SLA tiers and credit mechanisms; availability and DR commitments; data residency; exit and portability obligations; shared security responsibilities; and audit rights. Does not touch or mutate any live system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: compliance

package/skills/sap/sap-rise-sla-vendor-risk-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP systems, contract management portals, SAP for Me, or any signed contract repositories. Accepts only user-provided contract excerpts, term summaries, SLA schedules, or written descriptions of contractual obligations. Never request or accept SAP contract portal credentials, customer-specific contract identifiers, or confidential commercial terms beyond what the user voluntarily provides. Risk classifications are advisory only and do not constitute legal advice — legal counsel must be engaged for binding contract interpretation.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-rise-sla-vendor-risk-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-s4hana-transformation-architecture-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-s4hana-transformation-architecture-review
 description: Review an SAP S/4HANA transformation approach for architectural soundness. Assesses brownfield conversion, greenfield reimplementation, and selective data transition (SDT) strategies against SAP Activate methodology, deployment model options (Cloud Public Edition, Cloud Private Edition, RISE with SAP), SAP Readiness Check findings, simplification item impact, and fit-to-standard alignment. Advisory only — does not access or modify live systems.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: architecture

package/skills/sap/sap-s4hana-transformation-architecture-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP systems. Accepts only user-provided project documentation, SAP Readiness Check reports, simplification item lists, and architectural descriptions. Never request or accept system credentials, RFC destinations, S-user authentication tokens, or BTP service keys. Transformation strategy recommendations must be validated against the user's specific landscape version, license model, and SAP Activate release before implementation.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-s4hana-transformation-architecture-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-security-hr-legal-protocol/SKILL.md

@@ -3,7 +3,7 @@ name: sap-security-hr-legal-protocol
 description: Cross-functional escalation protocol governing handoffs between SAP Security, HR, and Legal when identity misuse, privileged-access anomalies, SoD violations, insider-risk signals, HR-sensitive system access, joiner/mover/leaver lifecycle events, or fraud-sensitive access patterns require coordinated response. Defines decision rights, evidence standards, redaction policy, approval gates, and audit packaging. Never mutates live systems and never bypasses any guarded-mutating gate.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: compliance

package/skills/sap/sap-security-hr-legal-protocol/metadata.json

@@ -28,7 +28,7 @@
   "security_notes": "Does not access live SAP systems, GRC Access Control tenants, SuccessFactors instances, or IAM consoles. Accepts only user-provided evidence artifacts. Never accepts or stores HR personal data, compensation records, disciplinary records, or health information. All role mutations must route through sap-role-assignment-guarded-operator-agent with documented dual approval. No guarded-mutating gate is bypassed by this protocol. Verbal approvals are rejected; written approval is mandatory for all cross-function actions.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-security-hr-legal-protocol",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-security-iam-grc-sod-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-security-iam-grc-sod-review
 description: Review SAP identity and access management posture: Cloud Identity Services (IAS/IPS), Authorization and Trust Management (XSUAA), role collections, GRC Access Control, and Segregation of Duties. Flags SoD conflicts, excessive privilege, orphaned accounts, and trust misconfigurations. Does not touch live systems.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: security

package/skills/sap/sap-security-iam-grc-sod-review/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Does not access live SAP IAS tenants, IPS admin consoles, XSUAA service instances, GRC Access Control systems, or BTP subaccounts. Accepts only user-provided SoD conflict reports, role lists, xs-security.json files, IAS exports, IPS connector descriptions, or written IAM landscape descriptions. Never request or accept IAS admin credentials, IPS technical user passwords, XSUAA client secrets, GRC system logon credentials, or BTP service keys. Unmitigated critical SoD conflicts must be escalated to the GRC or audit team — this skill does not approve or close access violations.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-security-iam-grc-sod-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-signavio-process-mining-value/SKILL.md

@@ -3,7 +3,7 @@ name: sap-signavio-process-mining-value
 description: Review SAP Signavio process intelligence and process mining configurations for value discovery: process discovery coverage, conformance checking against reference models, bottleneck and rework analysis, value realization tracking, and linkage of process mining findings to S/4HANA process improvement opportunities. Flags analytical blind spots, conformance gaps, and unrealized value levers. Does not modify process models, mining configurations, or live SAP systems.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: data

package/skills/sap/sap-signavio-process-mining-value/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Does not access live SAP Signavio Process Intelligence tenants, SAP S/4HANA systems, Ariba, SuccessFactors, or any source system event logs. Accepts only user-provided mining configuration descriptions, conformance check summaries, bottleneck analysis reports, value tracking dashboard exports, or written descriptions of the Signavio process mining setup. Never request or accept Signavio tenant credentials, SAP logon credentials, or event log data containing personally identifiable information. Does not modify process models, mining run configurations, conformance rules, or dashboard definitions. No live process mining run is triggered.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-signavio-process-mining-value",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-successfactors-hr-process-risk-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-successfactors-hr-process-risk-review
 description: Review SAP SuccessFactors HR process risk: Employee Central data and role-based permissions (RBP), org and position management integrity, hire-to-retire process controls, payroll integration data flow, data privacy for PII and GDPR, and joiner-mover-leaver lifecycle governance. Escalates HR-sensitive and PII findings. Does not accept raw PII or touch live systems.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: compliance

package/skills/sap/sap-successfactors-hr-process-risk-review/metadata.json

@@ -27,7 +27,7 @@
   "security_notes": "Does not access live SAP SuccessFactors tenants, Employee Central OData APIs, Integration Center endpoints, or payroll systems. Accepts only RBP configuration exports, permission role lists, org chart descriptions, integration mapping documentation, data privacy impact assessment summaries, or written process descriptions. Never accept, request, or process actual employee records, national ID numbers, bank account numbers, salary figures, home addresses, or health data. If raw PII is supplied, redirect immediately without analyzing the PII content. Confirmed unauthorized access to compensation or health data must be escalated to HR leadership and legal before further analysis.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-successfactors-hr-process-risk-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-supply-chain-ibp-resilience-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-supply-chain-ibp-resilience-review
 description: Review SAP Integrated Business Planning (IBP) and supply chain resilience posture: demand and supply planning configuration, Sales and Operations Planning (S&OP) process governance, inventory optimization and safety stock logic, statistical forecast accuracy and bias, IBP control tower alerts and exception management, scenario planning design, and supply chain risk coverage. Flags planning gaps, forecast blind spots, inventory policy misalignments, alert fatigue risks, and scenario planning deficiencies. Does not modify planning data, run supply plans, or mutate any live IBP system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: data

package/skills/sap/sap-supply-chain-ibp-resilience-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP IBP tenants, SAP S/4HANA systems, IBP Excel add-in sessions, IBP Fiori launchpads, or any production supply chain planning database. Accepts only user-provided configuration descriptions, planning parameter exports, S&OP process documentation, forecast accuracy metric reports, inventory policy summaries, control tower alert rule descriptions, scenario planning configuration notes, or written descriptions of the IBP and supply chain planning landscape. Never request or accept SAP IBP login credentials, API tokens, or direct planning database access. Never modifies demand plans, supply plans, inventory targets, alert rule configurations, or scenario data. Supply chain resilience findings that represent immediate disruption risk must be escalated to supply chain leadership — this skill does not approve plan changes or activate supply continuity measures.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-supply-chain-ibp-resilience-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-testing-quality-gate-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-testing-quality-gate-review
 description: Review SAP testing strategy and quality gate completeness for S/4HANA and SAP BTP programs: test scope and risk-based prioritization, SAP Cloud ALM test management configuration, automation coverage with Tricentis/CBTA, regression strategy for upgrades and transports, test data availability and masking, defect management workflow, and entry and exit criteria per test phase. Advisory only — does not execute tests, trigger automation runs, or mutate test management configuration.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: delivery

package/skills/sap/sap-testing-quality-gate-review/metadata.json

@@ -25,7 +25,7 @@
   "security_notes": "Does not access live SAP Cloud ALM tenants, execute test cases, trigger Tricentis automation runs, or connect to any SAP system. Accepts only user-provided testing strategy documents, test plans, defect status reports, automation coverage reports, and test data management documentation. Never accept test data extracts containing personally identifiable information, production system credentials, Cloud ALM API tokens, or Tricentis platform credentials. Does not authorize phase exit or go/no-go sign-off decisions — that authority belongs to the customer project governance body. If unmasked production data is confirmed in a lower environment, escalate to compliance review immediately.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-testing-quality-gate-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-transformation-portfolio-triage-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-transformation-portfolio-triage-review
 description: Advisory triage of an SAP transformation program portfolio: workstream prioritization, dependency and risk mapping, value vs effort classification, readiness gating across S/4HANA, BTP, integration, and security workstreams, and RAID log assessment. Does not touch or mutate any live system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: architecture

package/skills/sap/sap-transformation-portfolio-triage-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP systems, SAP Cloud ALM, project management tools, or transformation program repositories. Accepts only user-provided project plans, RAID logs, workstream charters, dependency maps, or written descriptions of the transformation program. Never request or accept SAP system credentials, Cloud ALM API tokens, Jira access tokens, or any live project tool authentication. Triage recommendations must be validated against the current program plan before communicating to stakeholders.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-transformation-portfolio-triage-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/sap/sap-treasury-cash-risk-review/SKILL.md

@@ -3,7 +3,7 @@ name: sap-treasury-cash-risk-review
 description: Review SAP Treasury and Risk Management (TRM) and Cash Management configurations: cash position and liquidity forecasting controls, bank account management (BAM) governance, in-house cash and payment factory design, hedge and exposure management controls, fraud prevention in payment processing, and segregation of duties across treasury operations. Flags control gaps in cash visibility, unauthorized payment release paths, hedge documentation deficiencies, bank account governance weaknesses, and fraud control bypass risks. Does not execute payments, trades, or hedges, and does not access any live treasury or banking system.
 allowed-tools: Read Grep Glob WebSearch WebFetch
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-19"
   category: finance

package/skills/sap/sap-treasury-cash-risk-review/metadata.json

@@ -26,7 +26,7 @@
   "security_notes": "Does not access live SAP S/4HANA Treasury systems, SAP Bank Communication Manager, SWIFT networks, banking portals, Fiori launchpads, SAP GUI sessions, or any production treasury or banking database. Accepts only user-provided configuration exports, authorization object summaries, bank account master data reports, payment run logs, hedge documentation summaries, or written descriptions of the treasury and cash management landscape. Never request or accept SAP logon credentials, RFC connection details, SWIFT credentials, banking portal access, or direct database connectivity. Never initiates, approves, releases, or modifies any payment, bank transfer, trade, hedge, settlement, or financial instrument. Critical payment fraud findings must be escalated to the treasury, audit, and GRC team — this skill does not authorize access changes or close audit findings.",
   "last_verified": "2026-06-19",
   "path": "skills/sap/sap-treasury-cash-risk-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0",
   "lifecycle": "experimental"
 }

package/skills/scaleway/scaleway-cost-optimizer/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-cost-optimizer
 description: Review and optimize Scaleway cost posture across Instance type rightsizing, reserved instance utilization, idle Object Storage buckets and SBS block volumes, Serverless function invocation cost, RDB instance sizing, and Cockpit observability spend. Use when the user asks to reduce Scaleway spend, audit bill composition, identify idle resources, or evaluate reserved instance commitments.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: finops

package/skills/scaleway/scaleway-cost-optimizer/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Do not recommend cost cuts that remove Cockpit observability, RDB automated backups, snapshot retention, or multi-zone placement group coverage without explicit risk acceptance. Reserved instance commitments are non-refundable; verify utilization before recommending.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-cost-optimizer",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/scaleway/scaleway-iam-policy-review/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-iam-policy-review
 description: Review Scaleway IAM policies, API key governance, service account bindings, and organization/project-level permission sets for least-privilege posture. Use when the user asks to audit API key scopes, review IAM policy breadth, assess service account access, or tighten Scaleway identity controls. Surfaces overly broad access, missing expiry, and key sprawl risks with actionable remediation paths.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: security

package/skills/scaleway/scaleway-iam-policy-review/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Scaleway API keys with organization-level scope grant access to all projects; always prefer project-scoped keys with expiry. IAM key sprawl — long-lived keys with broad scopes — is the top Scaleway access control risk. Service accounts assigned to resource types must be audited for implicit cross-project privilege escalation.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-iam-policy-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/scaleway/scaleway-kapsule-platform-operator/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-kapsule-platform-operator
 description: Review and advise on Scaleway Kapsule managed Kubernetes cluster readiness: node pool sizing and autoscaling, CNI plugin selection (Cilium, Calico, Kilo), placement group policy (max_availability vs enforced), Kubernetes version currency, PodDisruptionBudget coverage, and workload scheduling posture. Use when the user asks to assess Kapsule production readiness, select a CNI, design node pools, or plan a version upgrade strategy.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: platform

package/skills/scaleway/scaleway-kapsule-platform-operator/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Kapsule control-plane upgrades are irreversible — no downgrade path exists. CNI choice is immutable after cluster creation. Placement group 'enforced' policy may block instance scheduling under capacity pressure. Multi-zone node pools require verified Private Network attachment for cross-zone pod communication.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-kapsule-platform-operator",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/scaleway/scaleway-live-kapsule-rollout-guard/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-live-kapsule-rollout-guard
 description: Gate and execute Scaleway Kapsule live mutations — Kubernetes version upgrades, node pool creation/deletion/scaling, and cluster configuration changes — with mandatory PDB audit, cluster health verification, explicit approval, and a documented rollback plan. Use when a live Kapsule cluster or node pool mutation is requested. Hard-stops when target cluster ID, region/zone, approval, or rollback plan is absent or ambiguous.
 allowed-tools: Read Grep Glob Bash
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: platform

package/skills/scaleway/scaleway-live-kapsule-rollout-guard/metadata.json

@@ -23,6 +23,6 @@
   "security_notes": "Kapsule control-plane version upgrades are irreversible — no downgrade path exists. CNI type is immutable after cluster creation. Node pool deletion evicts all workloads immediately. Hard-stop is mandatory when target cluster ID, region/zone, approval token, or rollback plan is absent or ambiguous.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-live-kapsule-rollout-guard",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/scaleway/scaleway-maestro/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-maestro
 description: Classify and route Scaleway tasks to the narrowest qualified specialist agent. Use when a user presents a Scaleway request that spans IAM, cost, Kapsule/Kubernetes, networking, or live-guard domains, and the correct specialist is not yet identified. Produces a domain verdict, recommended specialist, and routing rationale without answering specialist questions directly.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: platform

package/skills/scaleway/scaleway-maestro/metadata.json

@@ -21,6 +21,6 @@
   "security_notes": "Never route to the live-guard agent without explicit user intent for a live mutation. Classification must stay read-only; do not infer project or zone identity from context alone.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-maestro",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/scaleway/scaleway-network-architect/SKILL.md

@@ -3,7 +3,7 @@ name: scaleway-network-architect
 description: Review and design Scaleway network topology for security and high availability: VPC layout, Private Network attachment across zones, security group rules, Load Balancer configuration, placement group policy selection (max_availability vs enforced), and multi-zone resilience patterns. Use when the user asks to design a Scaleway VPC, audit security group rules, configure a Load Balancer, or plan HA across zones fr-par-1/2/3, nl-ams-1, or pl-waw-1/2/3.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-10"
   category: networking

package/skills/scaleway/scaleway-network-architect/metadata.json

@@ -22,6 +22,6 @@
   "security_notes": "Placement group 'enforced' policy may block instance scheduling under zone capacity pressure — prefer 'max_availability' for production HA. Security groups are zone-scoped; cross-zone traffic must be reviewed for unintended public exposure via flexible IPs. VPC routes are regional, but Private Network interfaces are zone-bound; verify routing consistency across all target zones.",
   "last_verified": "2026-05-10",
   "path": "skills/scaleway/scaleway-network-architect",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/sigstore/sigstore-cosign-supply-chain-review/SKILL.md

@@ -3,7 +3,7 @@ name: sigstore-cosign-supply-chain-review
 description: Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist, whether SBOM attestations are present, whether keyless signing is in use, or whether Rekor transparency log posture is appropriate for private images.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-05-05"
   category: security

package/skills/sigstore/sigstore-cosign-supply-chain-review/metadata.json

@@ -17,6 +17,6 @@
   "security_notes": "Kyverno imageVerify policy without subject/issuer constraints accepts any Sigstore-signed image regardless of signer identity. Long-lived Cosign keys in CI secrets allow retroactive signing of malicious images if the secret is compromised.",
   "last_verified": "2026-05-02",
   "path": "skills/sigstore/sigstore-cosign-supply-chain-review",
-  "author": "github: Raishin",
+  "author": "github: VincentChuWaiChow",
   "version": "0.1.0"
 }

package/skills/snowflake/snowflake-data-platform-engineering-at-azure/SKILL.md

@@ -3,7 +3,7 @@ name: snowflake-data-platform-engineering-at-azure
 description: Design and review Snowflake data platform engineering on Azure, covering warehouse sizing and cost governance, Azure Private Link requirements, storage integration with ADLS Gen2 and Azure Blob, Snowpipe automation, object tagging, dynamic data masking, row access policies, and ACCESS_HISTORY lineage for GDPR and CCPA compliance.
 allowed-tools: Read Grep Glob
 metadata:
-  author: "github: Raishin"
+  author: "github: VincentChuWaiChow"
   version: "0.1.0"
   updated: "2026-06-17"
   category: data