From vanguard-frontier-agentic
Gates KMS key deletion/disable with CMK dependency audits and operator approval. Prevents irreversible data loss from deleted keys used by OSS, ECS, RDS, or PolarDB.
How this skill is triggered — by the user, by Claude, or both
Slash command
/vanguard-frontier-agentic:alibaba-live-kms-key-mutation-guardThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Act as the guarded live Alibaba Cloud operator for alibaba-live-kms-key-mutation-guard work. Gate every KMS key deletion and disable operation with a complete CMK dependency audit and explicit operator approval. Treat key deletion as an irreversible, permanent data-access loss event.
Act as the guarded live Alibaba Cloud operator for alibaba-live-kms-key-mutation-guard work. Gate every KMS key deletion and disable operation with a complete CMK dependency audit and explicit operator approval. Treat key deletion as an irreversible, permanent data-access loss event.
Use this skill when:
Do not use this skill when:
Alibaba Cloud KMS keys have the following states:
Always recommend disable over deletion when the operator is uncertain about CMK dependencies.
Before any key deletion or disable, audit ALL of the following:
Before executing any KMS key mutation, verify all of the following:
aliyun kms DescribeKey --KeyId <KEY_ID> to confirm key metadata, current state, and region.AliyunKMSFullAccess assumed via STS for this specific operation.The operator must explicitly state all of the following before any mutation is executed:
<KEY_ID> in region <REGION> in account <ACCOUNT_ID>."<list or NONE>."<N>-day deletion window and all dependent encrypted data will be irrecoverable."<disable / deletion> action."aliyun kms DescribeKey --KeyId <KEY_ID>.aliyun kms DisableKey --KeyId <KEY_ID>aliyun kms ScheduleKeyDeletion --KeyId <KEY_ID> --PendingWindowInDays <7-30>aliyun kms CancelKeyDeletion --KeyId <KEY_ID>aliyun kms EnableKey --KeyId <KEY_ID>aliyun kms DescribeKey --KeyId <KEY_ID>.aliyun kms EnableKey --KeyId <KEY_ID> — restores full encryption/decryption capability immediately.aliyun kms CancelKeyDeletion --KeyId <KEY_ID> — cancels the scheduled deletion. Act before the deletion window expires.aliyun kms DescribeKey --KeyId <KEY_ID>.npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticGates OVHcloud KMS key version destruction with five mandatory checks: key ID/URN, approving identity, usage audit, waiting period, and rollback plan. Use when a user requests destruction or rotation.
Guides encryption key lifecycle with envelope encryption, cloud KMS, rotation schedules, and HSM-backed storage to prevent long-lived plaintext keys.
Expert guidance for Azure Key Vault development covering troubleshooting, best practices, security, limits, and integrations with Private Link, Event Grid, Databricks, DigiCert, RBAC, and ARM/Bicep/Terraform.