All AEM as a Cloud Service skills: component development, Workflow model design, development, triggering, launchers, debugging, and triaging, Dispatcher config authoring, advisory, incident response, performance tuning, and security hardening, Rapid Development Environment (RDE) deployment, log inspection, snapshots, and troubleshooting via `aio aem rde`, Jackrabbit Oak query/index tuning (property, Lucene index definitions), and extracting/inventorying JCR queries (XPath, SQL2, QueryBuilder) across a codebase.
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
This is phase 5 (JUDGMENT + CROSS-BOUNDARY) of the flow in context.md: once the tool has converted the config and phase 4 has verified it, route each remaining concern to the owner that already knows how to resolve it instead of reimplementing it here.
| Concern | Owner | Where |
|---|---|---|
| Cloud Manager variables | migration Branch A | run scripts/dispatcher-crossboundary.js; hand the cmVars artifact to Branch A (../../SKILL.md → Branch A / osgi-cfg-json-cloud-manager.md); secretLike entries get Branch A's secret handling |
| Immutable/default freshness & drift | dispatcher skill | config-authoring → sdk(action="diff-baseline"), sdk(action="check-files"); validation-playbook.md §6 managed defaults |
| Filter/ACL security posture (deny-by-default, no allow-all, sensitive-path denies) | dispatcher skill | security-hardening → security-baseline-checklist.md + sensitive-paths-catalog.md; run lint(strict). Required after conversion — filter-acl-loss (phase 4) is a rule-count gate, not a posture check, so a preserved-but-insecure policy still needs this pass. |
| Security headers / edge / CDN split | dispatcher skill | security-hardening (headers) and performance-tuning (cache/edge) |
| Config validation & quality | dispatcher skill | config-authoring → validate / lint (already routed by validation.md) |
Why delegate. The dispatcher skill owns these via the core-7 MCP tools for cloud configs; Branch E contributes the conversion delta + CM handoff and hands off the rest.
config.yaml contract the tool is driven with.dispatcher skill..tessl-plugin
skills
aem-rde
aem-workflow
code-assessment
content-distribution
create-component
assets
references
dispatcher
incident-response
references
dispatcher-foundation
performance-tuning
references
dispatcher-foundation
security-hardening
references
dispatcher-foundation
technical-advisory
references
dispatcher-foundation
workflow-orchestrator
references
dispatcher-foundation
ensure-agents-md
references
migration
references
dispatcher
legacy-ui
template-modernization
validation
scripts
dispatcher-tool
validate-migration