SuiteCloud Agent Skills

---
name: netsuite-sdf-safe-guide
description: Comprehensive NetSuite SDF best practices based on the SAFE Guide (12 principles + appendices). Generates Object XML for all 14 script types, enforces governance limits, security patterns, and defensive coding. Includes N/cache, N/query, concurrency limits, OAuth 2.0 guidance, legacy TBA guardrails, CustomTool runtime patterns, REST Web Services (2026.1 features), and 140+ documented pitfalls. Essential for SuiteApp and Account Customization development.
license: The Universal Permissive License (UPL), Version 1.0
metadata:
  author: Oracle NetSuite
  version: "1.0"
---

# NetSuite SDF Safe Guide

## Description
Comprehensive guide for NetSuite SuiteCloud Development Framework (SDF) projects, incorporating the **SAFE Guide** (SuiteApp Architecture Framework for Excellence) principles. This skill provides:

- **SAFE Guide Integration**: 12 principles covering features, governance, performance, multi-SuiteApp environments, security, testing, distribution, maintenance, licensing, open-source compliance, secure coding, and UIF SPA best practices
- **Object XML Generation**: Automatically creates deployment XML files for all 14 SuiteScript types
- **Best Practices Enforcement**: Ensures correct deployment configurations, permissions, and status values
- **Common Pitfalls Documentation**: 140+ documented pitfalls with solutions learned from real deployments
- **Performance Guidance**: N/cache patterns, N/query with SuiteQL, avoiding N+1 queries, batch operations, Map/Reduce optimization
- **Architecture Patterns**: Suitelet-as-API pattern, popup communication with postMessage, module-level initialization
- **Defensive Coding**: Patterns for scripts to coexist with other scripts, workflows, and SuiteApps
- **Governance & Limits**: Usage unit limits by script type, concurrency limits, API costs, time limits
- **Security**: OWASP principles, input validation, secure coding practices
- **Appendices**: Concurrency limits, N/query joins, N/cache samples, and other static reference material

## How to Use This Skill

### Manual Invocation (Slash Command)
Invoke this skill at any time by typing:
```
/netsuite-sdf-safe-guide
```

Or use natural language triggers:
- "Generate objects" – Scan SuiteScripts folder and create missing Object XML files.
- "Create object for this script" – Generate Object XML for the current/specified file.
- "Check my deployment XML" – Review and validate existing Object XML files.
- "Review my SuiteScript" – Review code for best practices, pitfalls, and governance issues.

### Optional Coding Assistant Activation Example
For NetSuite SuiteCloud Development Framework (SDF) projects, supported coding assistants may preload this skill from project settings.

Here is an example for Claude, which is one of the supported coding assistants:
**Step 1:** Create or edit `.claude/settings.local.json` in your SDF project root:

```json
{
  "permissions": {
    "allow": [
      "Skill(netsuite-sdf-safe-guide)"