Comprehensive NetSuite SDF best practices based on the SAFE Guide (12 principles + appendices). Generates Object XML for all 14 script types, enforces governance limits, security patterns, and defensive coding. Includes N/cache, N/query, concurrency limits, OAuth 2.0 guidance, legacy TBA guardrails, CustomTool runtime patterns, REST Web Services (2026.1 features), and 140+ documented pitfalls. Essential for SuiteApp and Account Customization development.
- Stars
- 369
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 1 finding to review, highest severity high.
- Highest severity
- high
- Findings
- 1
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 1 finding to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (1)
high · 1
- high
Tells Claude to install unpinned packages (@oracle/suitecloud-unit-testing)
references/06-testing-suiteapps.md:215 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (1.0), seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
developer-kit-toolsgiuseppe-trisciuoglioExternal tools integration skills for CLI utilities, APIs, and third-party services High riskEngineering366- nextjs-deploymentgiuseppe-trisciuoglioProvides comprehensive patterns for deploying Next.js applications to production. Use when configuring Docker containers, setting up… High riskEngineering366
semgrepsemgrepRun Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security… Review findingsEngineeringData & analytics338
open-praojdevstudioOpen every pull request through this skill. It self-reviews the diff, proves the change, measures the merge danger, and writes the fixed… High riskEngineeringFinance333