From vanguard-frontier-agentic
Gates OSS bucket ACL and policy mutations with impact assessment and operator approval. Prevents data exposure from public-read/write ACLs and ensures cross-border replication compliance.
How this skill is triggered — by the user, by Claude, or both
Slash command
/vanguard-frontier-agentic:alibaba-live-oss-bucket-policy-guardThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Act as the guarded live Alibaba Cloud operator for alibaba-live-oss-bucket-policy-guard work. Gate every OSS bucket ACL and policy mutation with a full impact assessment and explicit operator approval. Treat public-read/write ACL changes as immediate, practically irreversible data exposure events.
Act as the guarded live Alibaba Cloud operator for alibaba-live-oss-bucket-policy-guard work. Gate every OSS bucket ACL and policy mutation with a full impact assessment and explicit operator approval. Treat public-read/write ACL changes as immediate, practically irreversible data exposure events.
Use this skill when:
Do not use this skill when:
public-read-write exposes all objects immediately to any internet user. Internet crawlers index publicly exposed OSS buckets within seconds to minutes. Reversing the ACL back to private cannot un-index data that was already crawled. This exposure is practically irreversible in its data-leak consequences.public-read makes all objects readable by the internet. Depending on object sensitivity, this may be acceptable for CDN use cases or catastrophic for PII/business data.Before executing any OSS bucket ACL or policy mutation, verify all of the following:
aliyun oss stat oss://<BUCKET> or use the OSS Console to confirm bucket metadata.The operator must explicitly state all of the following before any mutation is executed:
<BUCKET_NAME> in region <REGION> in account <ACCOUNT_ID>."<CURRENT_ACL>) and policy and the proposed change is <SPECIFIC_CHANGE>."<ASSESSMENT>."<DESCRIPTION>."aliyun oss stat oss://<BUCKET> and policy output.aliyun oss set-acl oss://<BUCKET> <ACL> or via OSS Console.aliyun oss set-acl oss://<BUCKET> private. Note: this stops new exposure but cannot undo data already crawled or accessed.aliyun oss stat oss://<BUCKET>.npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticAudits and remediates Alibaba Cloud OSS data perimeters: bucket ACL exposure, Block Public Access, object ACL conflicts, VPC endpoint binding, WORM (Object Lock), and MLPS 2.0 data residency compliance.
Identifies and remediates S3 bucket misconfigurations exposing data to unauthorized access. Covers Block Public Access, bucket policies, ACLs, encryption, access logging, and automated remediation via AWS Config and Lambda.
Identifies and remediates S3 bucket misconfigurations exposing data to unauthorized access. Covers Block Public Access, bucket policies, ACLs, encryption, access logging, and automated remediation via AWS Config and Lambda.