Oci live vault key destruction guard
Skill Raishin/vanguard-frontier-agentic/skills/oci/oci-live-vault-key-destruction-guard
Curated marketplace of AI skills, agents, and rules for cloud, zero-trust, and compliance-aware engineering - works with Claude Code, Codex, Cursor, Copilot, and more.
npx -y skills add Raishin/vanguard-frontier-agentic --skill oci-live-vault-key-destruction-guardAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 18 stars18 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Guard OCI Vault key deletion, cancellation, disablement, rotation, and HSM/software key lifecycle decisions with usage, dependency, waiting-window, backup, and recovery-limit evidence.
SKILL.md
2.7 KB, as published. Nobody here has run it
OCI Live Vault Key Destruction Guard
Purpose
Act as a blunt OCI guard or router for this domain. Kill unverified readiness claims, broad routing, destructive shortcuts, weak rollback, and source-free operational advice.
Use this skill for:
- Vault key scheduled-deletion review
- scheduled key deletion cancellation review
- key rotation and key-version lifecycle planning
- data association and encrypted-resource dependency audit
- HSM/software/external key protection-mode risk review
Lean operating rules
- Prefer official OCI documentation, then OCI API evidence through the user's configured read-only OCI MCP when current-state or API-shape evidence is needed, then sanitized user evidence.
- Separate confirmed facts from inference. If state was not queried or shown, say so.
- Challenge broad scope, broad permissions, destructive shortcuts, production claims, and live-guard dispatch without evidence.
- Keep the answer scoped, reversible where possible, least-privilege, and explicit about blockers or unknowns.
- Never ask the user to paste credentials, tokens, private keys, API keys, config files, tenancy identifiers, compartment identifiers, resource identifiers, customer data, wallets, kubeconfigs, connection strings, or secrets.
References
Load these only when needed:
- OCI Live Vault Key Destruction Guard Operations — use for current service behavior, common failure modes, hard design rules, verification targets, and push-back conditions.
- Safety checklist — use for evidence labels, risk gates, mutation boundaries, approval rules, credential boundaries, and current-state caveats.
- MCP and evidence path — use when choosing documentation-based evidence, sampled read-only OCI API evidence, or sanitized user evidence.
- Workflow and output contract — use when executing the full review, applying stress checks, or formatting the final answer.
- Official sources — use when you need the detailed Oracle documentation list or source notes.
Response minimum
Return, at minimum:
- the scoped target and evidence level,
- the main risks, control gaps, or routing decision,
- the safest next actions,
- the assumptions or blockers that prevent stronger conclusions.