Raishin

Alibaba Cloud Maestro routing skill. It classifies user tasks, then selects and dispatches the most suitable specialist agent or a team (up to 4) for multi-domain tasks. This skill is China-region aware, flagging workloads in mainland China and applicable regulations, and never auto-dispatches live-guard agents.

Manage MaxCompute CU package governance, DataWorks scheduling, Quick BI reporting, and PAI ML platform. Optimize query cost and job scheduling efficiency for big data workloads.

Plan Alibaba Cloud migrations using SMC (Server Migration Center), DTS (Data Transmission Service) for data sync, OSSImport for object storage migration, and design cutover sequencing with rollback paths.

Configure and operate Alibaba MSE (Microservice Engine) — Nacos service discovery and configuration management, Sentinel rate limiting and circuit breaking, Seata distributed transactions, and ARMS APM for microservices observability.

Design Alibaba Cloud network topology, including VPC peering, CEN for multi-VPC/multi-region connectivity, Express Connect for private circuits, selection of SLB/ALB/NLB/CLB load balancers, and Smart Access Gateway for branch offices.

Respond to Alibaba Cloud incidents using CloudMonitor alarms, SLS log analytics, ARMS APM distributed tracing, and alert governance for ECS, RDS, ACK, and network services.

Govern Alibaba Cloud OSS data perimeters, including bucket ACL and policy conflict resolution, Block Public Access configuration, cross-account access via RAM role, VPC endpoint binding for private access, WORM (Object Lock), and MLPS 2.0 data residency compliance.

Manage OSS lifecycle policies, bucket policy and ACL governance, NAS/CPFS shared file storage, cross-region replication, and access control hardening for Alibaba Cloud object and file storage.

Operate PolarDB (MySQL/PG/Oracle) clusters and RDS instances, covering DAS diagnostics, database proxy, Global Database Network, backup strategy, and performance tuning.

Govern Alibaba Cloud Container Registry (ACR) — Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.

Review Alibaba Cloud workload HA and BCDR designs, including RDS High-Availability Edition failover, PolarDB Global Database Network, ACK multi-zone, ECS cross-region disaster recovery, RTO/RPO target analysis, and HBR (Hybrid Backup Recovery) coverage.

Harden Alibaba Cloud security posture via Security Center (threat detection, vulnerability scanning, baseline checks), WAF, Anti-DDoS Pro, Cloud Firewall, and Network Traffic Analysis (NTA).

Review Function Compute 3.0 (FC3), SAE (Serverless App Engine), and EDAS for production readiness, focusing on cold start optimization, VPC binding, RAM role injection, ARMS distributed tracing, security group rules, concurrency limits, and SLA-readiness.

Design Alibaba Cloud solutions — product selection (PolarDB vs RDS, ACK vs ASK vs SAE, MaxCompute vs AnalyticDB), architecture patterns, landing zone design, and disaster recovery strategies aligned to the Alibaba Well-Architected Framework.

Coordinates Alibaba Cloud support incidents, including case creation with correct severity (Urgent/High/Medium/Low), Enterprise Support SLA enforcement, account manager escalation, status page monitoring for CN-* and international regions, internal stakeholder communication, and post-incident evidence packaging.

Install all Vanguard Frontier Agentic Codex agents and companion skills into the current user's ~/.codex home after adding or installing the plugin marketplace.

Operate ACK clusters (managed/dedicated/serverless), ACR container registries, ASM service mesh, and container workload placement. Guide ACK type selection, OIDC workload identity, and image vulnerability posture.

Review Alibaba Cloud SSL Certificate Service, covering DV/OV/EV certificate lifecycle, auto-renewal configuration, deployment to SLB/ALB/CDN/OSS, domain validation status, CAA record compliance, and expiry monitoring.

Triage Alibaba Cloud operational alerts, incidents, and support tickets, including P0/P1/P2/P3 classification, Alibaba Cloud Support SLA enforcement, account manager escalation, DingTalk war room coordination, evidence collection from CloudMonitor and SLS, and safe escalation paths.

Assess Alibaba Cloud cost posture: ECS instance family rightsizing, Savings Plans and Reserved Instance coverage, Preemptible Instance adoption, cost allocation tagging, OSS storage tiering, analytics pricing, and idle resource elimination.

Assess Alibaba Cloud workload reliability, covering multi-AZ ECS topology, SLB/ALB/NLB load balancing, Auto Scaling health policies, RDS/PolarDB HA failover, backup and cross-region DR, and Cloud Monitor/ARMS observability.

Assesses Alibaba Cloud workload security posture, covering RAM least-privilege, VPC isolation, KMS/HSM encryption, threat detection, audit, web protection, and compliance with Chinese regulations like MLPS 2.0, DSL, and PIPL.

Use this skill when reviewing Argo Rollouts progressive delivery configuration. Trigger when the user asks about canary or blue-green Rollout strategy correctness, AnalysisTemplate success/failure conditions, traffic weighting provider alignment, canaryService isolation, PDB deadlock risk with Rollout maxSurge settings, automated rollback posture, or manual vs automated promotion configuration.

Use this skill for Argo CD GitOps review across Application, AppProject, ApplicationSet, sync windows, RBAC, sync impersonation, and Argo CD Agent multi-cluster topologies. Trigger when the user asks whether an Argo CD configuration is safe for production, whether automated sync should be enabled, whether prune+selfHeal is appropriate, whether AppProject scope is too wide, or how to enforce least-privilege.

Pre-change blast radius analysis for Alibaba Cloud, covering Resource Directory OU scope mapping, RAM policy cascade effects, VPC peering and CEN impact, SLB backend pool changes, RDS connection pool disruption, and safe change sequencing.

Use this skill for Azure resilience, business continuity, and disaster recovery reviews covering RTO/RPO realism, failover and failback assumptions, shared-responsibility gaps, and recovery runbook or drill quality.

Use this skill for reviewing Backstage Scaffolder software templates, especially when assessing their safety for developer self-service, RBAC, input validation, blast radius of actions, or exposure of secrets in outputs.

Detect and coordinate response to Alibaba Cloud cost anomalies, such as MaxCompute billing mismatches, ECS spot instance interruption cascades, CDN traffic spike billing, and OSS API request cost explosions, triggering DingTalk notifications and remediation playbooks upon budget alerts.

Analyze Alibaba Cloud spend via Cost Manager, optimize Savings Plans and Reserved Instance coverage, design resource tagging strategy, investigate budget drift, and right-size over-provisioned ECS, RDS, and MaxCompute resources.

Coordinate the daily Alibaba Cloud operations standup, covering cost delta, ActionTrail anomalies, ACK pod failures, quota warnings, Security Center findings, and action item assignment.

Operate ECS instances, Auto Scaling groups, ECI serverless containers, and Cloud Assistant O&M automation. Handle instance lifecycle, image management, placement groups, spot/preemptible instances, and scheduled scaling.

Analyze BigQuery slot reservation sizing, BI Engine acceleration, query cost estimation, dataset governance (expiration, access controls), and partitioning/clustering optimization to reduce on-demand scan costs.

Use this skill to evaluate a Salesforce release for deployment readiness. It covers sandbox refresh strategy, source tracking state, package version differences, destructiveChanges.xml review, test coverage verification, post-deploy steps, rollback plan, comms plan, and approval matrix.

Use this skill to evaluate Salesforce deployment zero-trust readiness against NIST SP 800-207 ZTA principles. It covers continuous verification, MFA status, OAuth token lifetimes, session re-authentication, certificate health, and mTLS enforcement for external integrations.

Triages GCP operational alerts, incidents, and support tickets, including P0/P1/P2/P3 classification and GCP Premium/Enhanced Support SLA enforcement. This involves war room coordination, evidence collection from Cloud Monitoring and Cloud Logging, and establishing safe escalation paths.

Reviews Hetzner Cloud infrastructure posture, covering firewall rules, load balancer setup, network topology, IP exposure, and region distribution across fsn1, nbg1, and hel1. Use to audit or enhance Hetzner Cloud network security or architecture.

Use this skill to review custom-audience and lookalike-audience upload specifications for hashing adequacy, PII field scope, consent-basis validity, and platform data-sharing restrictions before submission to Meta, Google, LinkedIn, or TikTok.

This skill reviews Kubernetes Pod Security Admission (PSA), covering namespace labels for privileged, baseline, and restricted profiles, enforce/audit/warn modes, version pinning, and migration from deprecated PodSecurityPolicy. It triggers when users ask about namespace label safety, workload profile compliance, or audit/warn modes.

Routes marketing-governance review tasks to the most suitable specialist or team from a catalog when the specific expert is unknown. Maestro classifies, dispatches, and synthesizes, assigning a single agent or a parallel team (up to 4) for diverse tasks.

Review Alibaba Cloud EventBridge, MNS (Message Notification Service), RocketMQ, and MSE event-driven designs, covering dead-letter queues, message ordering, idempotency, retry storm prevention, schema registry, and consumer group lag monitoring.

Use this skill when the user asks which Azure role to assign, how to grant minimum access, whether a built-in role is sufficient, or when a custom role may be required.

Review Terraform and ROS (Resource Orchestration Service) changes targeting Alibaba Cloud, including blast radius analysis, resource deletion detection, cross-stack dependency impact, Resource Directory scope, and rollback plan completeness.

Use this skill to evaluate any proposed mutation to a live Salesforce production org before execution. It acts as a refusal-by-default gate, stopping if any required precondition like target_org_identity or approval_state is missing.

Plan and execute migrations to GCP using Migrate to Virtual Machines, Database Migration Service, Storage Transfer Service, and design cutover sequencing with rollback plans.

Build and operate Huawei CodeArts CI/CD pipelines across CodeHub (Git), Build, Deploy, TestPlan, and Pipeline modules, managing SWR image lifecycle, deployment automation, and environment promotion with rollback gates.

Advise on MLPS 2.0 grading and technical controls, DSL Article 31 cross-border data transfer, CSL network operator obligations, PIPL personal data requirements, and ICP Beian filing for mainland China CN-* region workloads.

Operate AnalyticDB for MySQL and PostgreSQL, Hologres real-time OLAP analytics, and DAS real-time diagnostics for sub-second interactive analytics workloads.

Query Alibaba Cloud ActionTrail management API call history, build governance audit reports, create SLS-based compliance evidence trails, and detect anomalous admin activity patterns.