...
npx skills add https://github.com/UnitOneAI/SecuritySkills --skill privileged-access-unitoneai
Please help me install this Agent Skill. Skill: privileged-access Source: https://github.com/UnitOneAI/SecuritySkills/tree/main/skills/identity/privileged-access Command: npx skills add https://github.com/UnitOneAI/SecuritySkills --skill privileged-access-unitoneai
Privileged Access Management often fails in practice, leaving standing admin access, weak break-glass procedures, incomplete session monitoring, and improperly vaulted credentials that undermine least-privilege requirements.
Run the privileged-access skill on your PAM configuration files and exports by invoking it with the target file or directory as an argument.
High-intent search queries and answers about installing and using this skill.
Assess privileged access management coverage by analyzing admin account inventories, MFA enforcement, and session recording against CIS Controls v8 and NIST SP 800-53 AC-6 least-privilege requirements to identify standing access gaps.
Find shadow admin paths and PAM bypass vulnerabilities by evaluating just-in-time access patterns and break-glass procedures against your PAM tooling coverage, treating all metadata as untrusted input to expose hidden privileged routes.
Just-in-time access evaluation works by analyzing privileged account inventories to verify that temporary admin grants are revoked timely and that JIT design enforces least-privilege alignment across cloud and on-prem systems.
Validate credential vaulting and session recording integrity by checking audit trail tamper-protection and credential rotation patterns, producing evidence-based findings with severity levels and framework mappings for compliance readiness.
Privileged access review supports both cloud and on-prem environments by evaluating PAM deployments across hybrid systems, analyzing admin MFA enforcement and break-glass readiness for incident-preparation workflows.
PAM deployments fail least-privilege requirements when standing admin access persists, JIT does not revoke timely access, session recording is missing, or credentials are improperly vaulted, undermining NIST SP 800-53 AC-6 compliance.
AcczdyReview privileged accounts across Active Directory, AWS IAM, Azure AD, and databases.
sjinksReview mobile application security weaknesses against OWASP guidance.
matteocervelliTest tool whitelist restrictions by attempting unauthorized access.
do360nowAnalyze user entitlements and account statuses across systems for security compliance.
