What problem does it solve?
HyperShift CI jobs leave behind orphaned AWS infrastructure (VPCs, NAT gateways, IAM roles, Route53 zones) that accumulates cost, but deleting the wrong resource can destroy a developer's active cluster. This Skill runs a rigorous, evidence-based triage so you know with confidence whether an infra set is safe to remove.
Core Features & Use Cases
- Twelve-Check Safety Audit: Verifies protection tags, protected VPC names, protected developer usernames, expiration dates, CI naming patterns, OIDC S3 liveness, running EC2 instances, ROSA-managed resources, sub-resource inventory, Route53 zones, OIDC IAM providers, and orphaned IAM roles.
- Empirical Verification Only: Every claim is backed by a live AWS CLI query against us-east-1 — no assumptions, no guessing.
- Clear Verdicts: Produces a structured report table ending in SAFE TO DELETE, DO NOT DELETE, UNCERTAIN, or REQUIRES HUMAN DECISION based on non-negotiable verdict rules.
- Use Case: You paste cleanleaked tool output showing a LEAKED verdict for infraID
00ab3695c5f73d4354b9. The Skill queries AWS, confirms the hex CI pattern, expired resources, no running instances, and no OIDC document, then reports SAFE TO DELETE.
Quick Start
Paste the cleanleaked output or a VPC ID and ask whether this leaked HyperShift CI infrastructure is safe to delete.
