Flashlight skill for reviewing the security and governance posture of NetSuite AI Connector Service (MCP) deployments. Verifies exact required permissions ('MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens' — not 'Log in using Access Tokens'), confirms the connecting role is never Administrator, validates explicit tool allowlists, checks HIPAA/BAA restrictions, and reviews prompt-injection testing coverage. T0 static review — no live account connection required. Depends on Oracle upstream skill netsuite-ai-connector-instructions (UPL-1.0) for tool-selection decision trees and SuiteQL safety patterns. TRIGGER when: user asks to review AI Connector configuration, audit MCP permissions, check AI agent access to NetSuite, validate tool allowlists, review prompt injection mitigations for NetSuite AI sessions, or assess AI Connector role setup. Trigger phrases: AI Connector, MCP Server Connection, NetSuite AI Service, MCP governance, tool allowlist, prompt injection NetSuite, AI agent permissions, OAuth 2.0 Access Tokens permission. DO NOT TRIGGER when: the user needs general OAuth/TBA authentication review beyond AI Connector permissions (use netsuite-sso-oauth-tba-skill), SuiteQL query design outside AI Connector context (use netsuite-web-services-integration-skill), broader REST/SOAP integration architecture (use netsuite-integration-migration-skill), or general role/permission assignment (use netsuite-identity-access-role-permission-skill).
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategorySecurityStars0
About this skill
Flashlight skill for reviewing the security and governance posture of NetSuite AI Connector Service (MCP) deployments. Verifies exact required permissions ('MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens' — not 'Log in using Access Tokens'), confirms the connecting role is never Administrator, validates explicit tool allowlists, checks HIPAA/BAA restrictions, and reviews prompt-injection testing coverage. T0 static review — no live account connection required. Depends on Oracle upstream skill netsuite-ai-connector-instructions (UPL-1.0) for tool-selection decision trees and SuiteQL safety patterns. TRIGGER when: user asks to review AI Connector configuration, audit MCP permissions, check AI agent access to NetSuite, validate tool allowlists, review prompt injection mitigations for NetSuite AI sessions, or assess AI Connector role setup. Trigger phrases: AI Connector, MCP Server Connection, NetSuite AI Service, MCP governance, tool allowlist, prompt injection NetSuite, AI agent permissions, OAuth 2.0 Access Tokens permission. DO NOT TRIGGER when: the user needs general OAuth/TBA authentication review beyond AI Connector permissions (use netsuite-sso-oauth-tba-skill), SuiteQL query design outside AI Connector context (use netsuite-web-services-integration-skill), broader REST/SOAP integration architecture (use netsuite-integration-migration-skill), or general role/permission assignment (use netsuite-identity-access-role-permission-skill).
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Flashlight skill for reviewing the security and governance posture of NetSuite AI Connector Service (MCP) deployments. Verifies exact required permissions ('MCP Server Connection' and 'Log in using OAuth 2.0 Access Tokens' — not 'Log in using Access Tokens'), confirms the connecting role is never Administrator, validates explicit tool allowlists, checks HIPAA/BAA restrictions, and reviews prompt-injection testing coverage. T0 static review — no live account connection required. Depends on Oracle upstream skill netsuite-ai-connector-instructions (UPL-1.0) for tool-selection decision trees and SuiteQL safety patterns. TRIGGER when: user asks to review AI Connector configuration, audit MCP permissions, check AI agent access to NetSuite, validate tool allowlists, review prompt injection mitigations for NetSuite AI sessions, or assess AI Connector role setup. Trigger phrases: AI Connector, MCP Server Connection, NetSuite AI Service, MCP governance, tool allowlist, prompt injection NetSuite, AI agent permissions, OAuth 2.0 Access Tokens permission. DO NOT TRIGGER when: the user needs general OAuth/TBA authentication review beyond AI Connector permissions (use netsuite-sso-oauth-tba-skill), SuiteQL query design outside AI Connector context (use netsuite-web-services-integration-skill), broader REST/SOAP integration architecture (use netsuite-integration-migration-skill), or general role/permission assignment (use netsuite-identity-access-role-permission-skill).
About this listing
Category
Security
Reported license
Apache-2.0
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI