Manage encrypted cloud-provider credentials (GCP, AWS, Azure) stored in a repo for Claude Code on the Web.
TRIGGER when the user explicitly asks to set up, rotate, or fix cloud credentials or service accounts — or when you detect .cloud-config.json or .cloud-credentials.*.enc files in the repo — or when a cloud CLI command fails with an authentication/permission error (401, 403, "not authenticated", "access denied").
DO NOT TRIGGER for general cloud questions ("what is a VPC?"), SDK usage ("how do I call the S3 API in Python?"), or cloud tasks where credentials are already working. Only invoke this skill when credential setup, encryption, decryption, rotation, or repair is actually needed.
2026-03-17