SkillFoxx

SuiteCloud Agent Skills

Official Oracle skills for NetSuite: SuiteScript, SDF projects, secure code, role permissions and finance analysis on live data.

  • 382 ★ on the repository
  • Last commit
  • UPL-1.0
Skill

Extended access

Why this level

  • Business skills read live account financial data through the NetSuite AI Connector Service within your role's permissions.
  • The SuiteSkills plugin supports drafts and authorized workflows in NetSuite, so keep role permissions minimal.
All reasons and checks

oracle/netsuite-suitecloud-sdkAuthor:Oracle

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add skills/suitecloud-agent-skills

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

  • Business skills read live account financial data through the NetSuite AI Connector Service within your role's permissions.
  • The SuiteSkills plugin supports drafts and authorized workflows in NetSuite, so keep role permissions minimal.

This is third-party code. Review the repository files before installing.

What it does

SuiteCloud Agent Skills is a set of ten Oracle skills that let an agent work in NetSuite. Eight target developers: SuiteScript, SDF projects, UIF SPA components, OWASP secure coding, roles and permissions, project documentation, SAFE Guide learning and migration of scripts from SuiteScript 1.0 to 2.1. The other two are for business users and run through the NetSuite AI Connector Service: rules for sessions on NetSuite data and finance analysis. The skills follow the agentskills.io specification and install into a chosen agent with the `skills` CLI. The same repository packages them into plugins for supported OpenAI and Anthropic platforms: NetSuite AI Companion, Finance Analyst, SuiteCloud and SuiteSkills with 48 business runbooks.

Who it is for. SuiteApp and NetSuite customization developers, plus finance analysts and administrators who work with NetSuite data through AI.

Good fit when

  • A SuiteScript 1.0 script has to move to 2.1, with API and entry point mappings checked.
  • An SDF project needs role permissions described and permission IDs verified.
  • Before a SuiteApp release, the code is reviewed for common OWASP Top 10 vulnerabilities.
  • A finance director wants an income statement, receivables or budget versus actuals review from NetSuite data.
  • A new developer learns the SAFE Guide through code walkthroughs and quizzes.

Not a fit when

  • The task has nothing to do with NetSuite: the skills are tied to that product.
  • The finance skill is pulled into SuiteScript development or general NetSuite administration.
  • No NetSuite AI Connector Service is connected to the account, so business skills have nothing to analyze.
  • You want finished code with no review: the skills supply rules and references, and code review stays with the developer.

Example request

Use $netsuite-uif-spa-reference to build a UIF SPA component with a data table and filters.

Limitations

The skills work only with NetSuite and SuiteCloud. Business skills need a connected NetSuite AI Connector Service, and the outcome depends on account features, role permissions and agent capabilities. Installation needs the `skills` CLI, installed through npm. The repository also holds other Oracle tools: a Node.js CLI, a VS Code extension and unit tests. This card covers only the skills and plugins. Your own skills for this set must be named with the `netsuite` prefix.

How to disable. Run `npx skills remove <skill name>`, for example `npx skills remove netsuite-uif-spa-reference`, with `-a codex` when needed. An installed plugin is removed with the platform's own tools.

FAQ

How do I install one skill from the set?

Add the `--skill` flag and an agent: `npx skills add oracle/netsuite-suitecloud-sdk --skill netsuite-uif-spa-reference -a codex`. The `-g` flag installs the skill globally for all projects.

Which skills does a finance analyst need?

`netsuite-finance-analyst` and `netsuite-ai-connector-instructions`. Both run through the NetSuite AI Connector Service: the first covers reports, period close and cash, the second sets tool selection order and safe SuiteQL usage.

What does the netsuite-suitescript-upgrade skill do?

It moves SuiteScript 1.0 scripts to 2.1: it analyzes, converts, explains and validates the result. Its description covers more than 125 API mappings and 34 object conversions.

How do I call a skill in Codex?

After installing with `-a codex`, name the skill in the prompt using the pattern `Use $<skill name> to <task>`. Add the goal, files and project constraints.

How do I update installed skills?

`npx skills check` looks for updates and `npx skills update` installs them from the same source.

Discussion

No questions or reviews yet.

Skills

A set of independent skills against drift in large codebases: hard-cut, root-cause tracing, lean testing and CI right-sizing.

SkillMinimal access140
Editors’ pick

Salesforce's official set of agent skills for platform development: Apex, Flow, SOQL, Lightning Web Components, metadata and deployment

SkillBroad access1.2K

A vetted skill registry with a CLI that installs into twenty-plus agents and an MCP server for on-demand skill lookup

SkillExtended access7.2K

skills-npm links agent skills shipped in your dependencies in node_modules and listed in the skills field of package.json

CLIExtended access582

The author's personal set: shared agent rules and dozens of skills for GitHub, the browser, macOS, messaging and releases, plus a sync script

SkillBroad access7.5K

Over 1,100 ready-made skills for Claude Code, Codex, Gemini CLI and Cursor, plus an MCP server that picks a skill for the task

SkillExtended access200

README in short

The repository bundles SuiteCloud SDK tools: AI agent plugins, skills, a Node.js CLI, a VS Code extension, unit tests and UIF types. Skills live in `packages/agent-skills` and plugins in `packages/ai-plugins`. The skills section covers installing, removing and updating through the `skills` CLI, plus design principles: platform independence and local reference files.

README badge

Original SKILL.md

---
name: netsuite-sdf-safe-guide
description: Comprehensive NetSuite SDF best practices based on the SAFE Guide (12 principles + appendices). Generates Object XML for all 14 script types, enforces governance limits, security patterns, and defensive coding. Includes N/cache, N/query, concurrency limits, OAuth 2.0 guidance, legacy TBA guardrails, CustomTool runtime patterns, REST Web Services (2026.1 features), and 140+ documented pitfalls. Essential for SuiteApp and Account Customization development.
license: The Universal Permissive License (UPL), Version 1.0
metadata:
  author: Oracle NetSuite
  version: "1.0"
---

# NetSuite SDF Safe Guide

## Description
Comprehensive guide for NetSuite SuiteCloud Development Framework (SDF) projects, incorporating the **SAFE Guide** (SuiteApp Architecture Framework for Excellence) principles. This skill provides:

- **SAFE Guide Integration**: 12 principles covering features, governance, performance, multi-SuiteApp environments, security, testing, distribution, maintenance, licensing, open-source compliance, secure coding, and UIF SPA best practices
- **Object XML Generation**: Automatically creates deployment XML files for all 14 SuiteScript types
- **Best Practices Enforcement**: Ensures correct deployment configurations, permissions, and status values
- **Common Pitfalls Documentation**: 140+ documented pitfalls with solutions learned from real deployments
- **Performance Guidance**: N/cache patterns, N/query with SuiteQL, avoiding N+1 queries, batch operations, Map/Reduce optimization
- **Architecture Patterns**: Suitelet-as-API pattern, popup communication with postMessage, module-level initialization
- **Defensive Coding**: Patterns for scripts to coexist with other scripts, workflows, and SuiteApps
- **Governance & Limits**: Usage unit limits by script type, concurrency limits, API costs, time limits
- **Security**: OWASP principles, input validation, secure coding practices
- **Appendices**: Concurrency limits, N/query joins, N/cache samples, and other static reference material

## How to Use This Skill

### Manual Invocation (Slash Command)
Invoke this skill at any time by typing:
```
/netsuite-sdf-safe-guide
```

Or use natural language triggers:
- "Generate objects" – Scan SuiteScripts folder and create missing Object XML files.
- "Create object for this script" – Generate Object XML for the current/specified file.
- "Check my deployment XML" – Review and validate existing Object XML files.
- "Review my SuiteScript" – Review code for best practices, pitfalls, and governance issues.

### Optional Coding Assistant Activation Example
For NetSuite SuiteCloud Development Framework (SDF) projects, supported coding assistants may preload this skill from project settings.

Here is an example for Claude, which is one of the supported coding assistants:
**Step 1:** Create or edit `.claude/settings.local.json` in your SDF project root:

```json
{
  "permissions": {
    "allow": [
      "Skill(netsuite-sdf-safe-guide)"

Report a problem