audit-permissions

Name: audit-permissions
Availability: InStock
Author: buvis

Audit permission grants across settings files to identify overly broad patterns.

2|Updated Dec 20, 2020

Search Tags:#security #audit #compliance #usage #risk #permission

Ready to run

npx skills add https://github.com/buvis/home --skill audit-permissions-buvis

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-permissions
Source: https://github.com/buvis/home/tree/main/.claude/skills/audit-permissions
Command: npx skills add https://github.com/buvis/home --skill audit-permissions-buvis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits permission grants across settings files to identify overly broad patterns, outdated authorizations, and potential removal candidates.

Core Features & Use Cases

Inventory permission sources from common files and summarize risks.
Classify permissions by risk level and surface stale or never-used grants.
Use cases include periodic cleanups, onboarding of new teams, and compliance reviews.

Quick Start

Run an audit on your current settings to discover and evaluate permission grants.

Frequently Asked Questions about audit-permissions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit permission sprawl across settings files?▼

To audit permission sprawl, you can scan global and project-level settings files. The audit identifies overly broad patterns, stale grants, and removal candidates to help reclaim access control.

What is the best way to identify stale or unused permissions for compliance reviews?▼

Identifying stale permissions requires classifying grants by risk level and cross-referencing them with usage observations. This surfaces never-used authorizations and prioritizes compliance remediation.

How do I classify permission risk levels and validate denials in my configurations?▼

Classifying permission risk levels uses a multi-step workflow to gather sources, evaluate broad patterns, and validate denials. It generates reports highlighting overlaps and remediation suggestions.

Can I use this audit to clean up project-level settings during new team onboarding?▼

Yes, you can use this audit for periodic cleanups and new team onboarding. It inventories permission sources from common files, summarizes risks, and suggests removal candidates to secure configurations.

What limitations exist when cross-referencing permission grants with usage observations?▼

A limitation is that cross-referencing permission grants depends on accurate usage observations. Without reliable usage data, the audit may struggle to correctly prioritize remediation or identify stale authorizations.