Individual skill
kms-pro
Design key management with KMS/HSM — envelope encryption, key hierarchy, rotation, and access governance.
skills/kms-pro/SKILL.md
Source commit faf37c0859ebf627bfcb5225e8057d088691e0ae
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Not checked yet
- Last checked
- Nov 8, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 54
- Repository last updated
- Oct 10, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- ai-agents Repository topic
- ai-agents-automation Repository topic
- ai-skills Repository topic
- awesome Repository topic
- awesome-list Repository topic
- chatgpt Repository topic
- claude-skills Repository topic
- meta-ai Repository topic
- muse-ai Repository topic
- design Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 6,968 bytes
Read excerpt
## Overview
Encryption is only as strong as key management. KMS (Key Management Service) and HSM (Hardware Security Module) practice answers: where keys live, who can use them, how they rotate, and what happens when they are compromised. Done right, a stolen database is unreadable; done wrong, the key sits next to the lock.
This skill covers key-management architecture: envelope encryption, key hierarchies, rotation, separation of duties, and the operational realities (backup, disaster recovery, cost) teams forget until they matter.
Key management is the rare security domain where the failure mode is total and silent: lose the keys and the data is gone; leak the keys and the encryption was theater. Both failures are operational, not cryptographic — which is why the boring parts (backup drills, access reviews, rotation automation) matter more than algorithm choice.
## When to use
- Designing encryption for data at rest (databases, object storage, backups).
- Choosing between cloud KMS, self-managed vault, and HSM.
- Implementing envelope encryption in applications.
- Planning key rotation, compromise response, and multi-region key strategy.