netsuite-ai-foundations-skill

name	netsuite-ai-foundations-skill
description	Flashlight skill for reviewing NetSuite AI feature enablement and AI Connector Service configuration posture, aligned to the AI Foundations Associate certification (N16765GC10, available). T0 static review — no live account connection required. NOTE: AI Specialist and AI Professional certifications are COMING SOON and are not yet available; this skill does not cover those levels. TRIGGER when: user asks to review NetSuite AI feature enablement (bill matching, anomaly detection, text enhancement, predicted risk), AI Connector Service configuration, MCP Server Connection permission setup, OAuth 2.0 Access Tokens permission for AI roles, HIPAA/BAA restriction for healthcare accounts, or AI governance and PII exposure controls. Trigger phrases: AI Foundations review, AI Connector configuration, MCP Server Connection permission, NetSuite AI features, AI bill matching, AI anomaly detection, HIPAA AI restriction, AI governance review, Log in using OAuth 2.0 Access Tokens. DO NOT TRIGGER when: request is about AI Connector MCP tool execution or SuiteQL query safety (use netsuite-ai-connector-mcp-agent); OAuth 2.0 authentication setup beyond the AI role (use netsuite-sso-oauth-tba-agent); SuiteScript code security (use netsuite-suitescript-secure-code-review-agent); or live account mutation is required (use netsuite-live-org-mutation-guard-agent). Never assert that AI Specialist or AI Professional certifications are available — they are COMING SOON.
allowed-tools	Read Grep Glob
metadata	{"author":"github: Raishin","version":"0.1.0","updated":"2026-06-09","category":"ai","lifecycle":"experimental","execution_tier":"static-review","mcp_servers":[],"oauth_scopes":[],"run_as_permissions":{"required":[],"denied":[]}}

NetSuite AI Foundations Skill

Purpose

Validates that NetSuite AI feature configurations and AI Connector setup follow least-privilege, zero-trust, and data-governance principles aligned to the AI Foundations Associate certification (N16765GC10, available). AI Specialist and AI Professional certifications are COMING SOON and are not available; this agent does not claim alignment to those levels. T0 static review — no NetSuite account connection required; output is a draft for human review.

When This Skill Owns the Task

• User submits AI feature enablement screenshots for governance review
• Implementation team needs AI Connector custom role validated against least-privilege requirements (not Administrator, MCP Server Connection + Log in using OAuth 2.0 Access Tokens)
• Healthcare customer needs HIPAA/BAA restriction check before enabling AI Connector
• CoE architect needs AI foundations governance posture reviewed for enterprise deployment

Recommended Workflow

1. Step 1 — Collect sanitized inputs: request AI feature enablement screenshot, AI Connector custom role permission export, healthcare/BAA status confirmation, and Server SuiteScript/OAuth 2.0 feature flag status
2. Step 2 — HIPAA/BAA gate: if the account is a healthcare customer with a signed BAA, immediately flag AI Connector activation as blocked (Critical finding); do not proceed with activation advice
3. Step 3 — AI feature enablement review: validate which AI features are enabled (bill matching, anomaly detection, text enhancement, predicted risk); flag any feature enabled without a corresponding governance control
4. Step 4 — AI Connector role validation: confirm the custom role is not Administrator, holds MCP Server Connection and Log in using OAuth 2.0 Access Tokens permissions (not 'Log in using Access Tokens'), and has 2FA designation
5. Step 5 — Feature flag verification: confirm Server SuiteScript, OAuth 2.0, and (if applicable) REST Web Services are enabled before AI Connector can operate
6. Step 6 — PII exposure review: identify which record types and fields are accessible via AI features; flag any sensitive fields (SSN, bank account, credit card) exposed without masking
7. Step 7 — Emit findings report: rated Critical / High / Medium / Low with [FACT] / [INFERENCE] / [ASSUMPTION] labels and safe-next-actions

Evidence Hierarchy

LIVE_EVIDENCE > REPOSITORY_EVIDENCE > USER_PROVIDED > OFFICIAL_DOCUMENTATION > INFERENCE > UNVERIFIED > BLOCKED

Safety Checklist

• No live NetSuite connection — all inputs are sanitized configuration excerpts
• No credentials, tokens, consumer keys, or client secrets in submitted inputs
• Never claim AI Specialist or AI Professional certification availability — both are COMING SOON