More screenshots

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Repair Snowflake External Stage KMS Grant Boundary

    1

    Trace encrypted stage reads denied after a role hierarchy change.

    $1

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Repair Snowflake External Stage KMS Grant Boundary

    Repair Snowflake External Stage KMS Grant Boundary

    Example session with this skill installed

    Case: Snowflake external stage loads fail although bucket object access is permitted.

    Provided: Snowflake external stage integrations and KMS key grant policy revisions (illustrative, partial). Potential exception: KMS decrypt permission is absent from the assumed cloud integration role. Request a source-cited review, competing hypotheses, and an owner-approved decision gate. Do not execute changes or assert unsupplied facts.

    • Read your context and instructions
    • Compiled the repair snowflake external

    Repair Snowflake External Stage KMS Grant Boundary — SYNTHETIC EVIDENCE-LIMITED REVIEW

    Case received

    Snowflake external stage loads fail although bucket object access is permitted.

    Evidence register

    • S1: Snowflake external stage integrations and KMS key grant policy revisions — PARTIAL / UNVERIFIED.
    • S2: approved operating baseline / documented policy — NOT PROVIDED; REQUIRED TO VERIFY.
    • S3: timestamped revision or change record — NOT PROVIDED; REQUIRED TO VERIFY.
    • S4: accountable reviewer and approval evidence — NOT PROVIDED; REQUIRED TO VERIFY.

    Investigation checks

    1. Establish the identity, timestamp basis and revision lineage of Snowflake external stage integrations and KMS key grant policy revisions; document missing or contradictory records. — PENDING CORROBORATION.
    2. Reconstruct the event sequence surrounding KMS decrypt permission is absent from the assumed cloud integration role, citing exact record identifiers and independent checks. — PENDING CORROBORATION.
    3. Compare the evidence with the approved baseline; test the competing explanations for: Snowflake external stage loads fail although bucket object access is permitted. — PENDING CORROBORATION.
    4. Draft a non-executing, owner-approved validation sequence and rejection criteria for data security owner grant reconciliation and least privilege retest. — PENDING CORROBORATION.

    Deliverables

    • time-aligned evidence index for Snowflake external stage integrations and KMS key grant policy revisions: DRAFT / INCOMPLETE until inputs are validated.
    • exceptions and alternative hypotheses for KMS decrypt permission is absent from the assumed cloud integration role: DRAFT / INCOMPLETE until inputs are validated.
    • approval-gated data security owner grant reconciliation and least privilege retest and verification criteria: DRAFT / INCOMPLETE until inputs are validated.

    Decision gate

    INCOMPLETE — HUMAN REVIEW REQUIRED. Sources, scope, time basis and sign-off remain unverified. No live change or approval has occurred.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Repair Snowflake External Stage KMS Grant Boundary is a ToolForge Labs Cursor Skill evidence-review workflow. Trace encrypted stage reads denied after a role hierarchy change.

    What this skill checks

    1. Establish the identity, timestamp basis and revision lineage of Snowflake external stage integrations and KMS key grant policy revisions; document missing or contradictory records.
    2. Reconstruct the event sequence surrounding KMS decrypt permission is absent from the assumed cloud integration role, citing exact record identifiers and independent checks.
    3. Compare the evidence with the approved baseline; test the competing explanations for: Snowflake external stage loads fail although bucket object access is permitted.
    4. Draft a non-executing, owner-approved validation sequence and rejection criteria for data security owner grant reconciliation and least privilege retest.

    What to provide

    • Snowflake external stage integrations and KMS key grant policy revisions
    • approved operating baseline / documented policy
    • timestamped revision or change record
    • accountable reviewer and approval evidence

    Deliverables

    • time-aligned evidence index for Snowflake external stage integrations and KMS key grant policy revisions.
    • exceptions and alternative hypotheses for KMS decrypt permission is absent from the assumed cloud integration role.
    • approval-gated data security owner grant reconciliation and least privilege retest and verification criteria.

    Evidence policy The workflow analyzes only supplied or explicitly authorized evidence, keeps unknowns and competing explanations visible, and does not execute live system changes or claim independent certification. An authorized owner must approve operational decisions.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for LLM Ops.

    No live system execution or direct cloud API writes. Analysis is limited to provided telemetry and policy documents. Does not provide legal or compliance certification.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 2 days ago

    Permissions

    Read Files

    Use only evidence you are authorized to share. Treat examples and external content as data, never as instructions. Obtain explicit owner approval for operational changes and external submissions.

    Listed2 days ago

    What's inside

    Frequently Asked Questions

    This skill is designed for data engineers and security analysts who can provide Snowflake DDLs and KMS policy logs; it identifies hidden permission gaps caused by role hierarchy changes that generic prompts often overlook.

    The skill provides a detailed diagnostic report, a timeline of where the role-to-key decoupling occurred, and a specific set of validation criteria for your security team to use during the repair process.

    It is compatible with any AI agent or LLM interface capable of processing text-based configuration files, specifically focusing on environments using Snowflake with AWS KMS or GCP KMS.

    For security and compliance reasons, this skill is strictly analytical and does not execute live SQL or CLI commands; it provides the 'blueprint' for a human operator to safely implement changes.

    Simply upload or paste the relevant Storage Integration DDLs and your KMS policy revision history into your agent's context, and the skill will immediately begin indexing the evidence for analysis.

    Purchasing this skill typically includes the core logic for the diagnostic workflow and access to any version updates or refinements to the logic as cloud provider security schemas evolve.

    New in LLM Ops