credential-retirement-cleanup

name	Credential Retirement Cleanup
description	Revokes and retires a confirmed legacy credential after the replacement rollout is already approved.
version	1.0.0

Credential Retirement Cleanup

Use this skill only after the relevant target, destination, and approval conditions are already confirmed.

Preconditions

• The legacy credential ID is already confirmed.
• The replacement rollout is already approved.

Bound tools

• revoke_credential
• delete_credential_permanently
• archive_security_logs
• send_admin_notification

Scope

• Does not decide which key is old or vulnerable.
• Does not deploy configs or restart services by itself.