pvm-use

Submit AWS permission requests with email-based approval and automatic revocation.

8|Updated Mar 12, 2026
One-click install
npx skills add https://github.com/genedragon/acp-platform --skill pvm-use
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pvm-use
Source: https://github.com/genedragon/acp-platform/tree/main/skills/pvm-use
Command: npx skills add https://github.com/genedragon/acp-platform --skill pvm-use

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Agents often need elevated AWS permissions for short tasks, but granting broad access is risky. This skill provides a controlled workflow to request time-limited permissions with human-in-the-loop approval.

Core Features & Use Cases

  • Submit permission requests for AWS actions (e.g., s3:GetObject, ec2:DescribeInstances) with a defined expiration.
  • Approver-driven workflow via email with Approve/Deny decisions and status tracking.
  • Automatic revocation of permissions after the specified duration, with live status updates.

Quick Start

Submit a permission request with your agent name, actions, resources, and duration to start the approval workflow.

Frequently Asked Questions about pvm-use

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up temporary AWS permissions with human approval?

Temporary AWS permissions with human approval are configured by submitting a request with your agent name, actions, resources, and duration to trigger an email-based approve or deny workflow. Access is automatically revoked when the duration ends.

What is a human-in-the-loop workflow for temporary AWS IAM access?

A human-in-the-loop workflow for AWS IAM access routes elevated permission requests to an approver via email for explicit authorize or deny decisions. It ensures actions like s3:GetObject are granted only for a defined duration before automatic revocation.

How do I automatically revoke AWS IAM permissions after a set duration?

You automatically revoke AWS IAM permissions after a set duration by defining an expiration when submitting the access request. The backend monitors the approval status and removes the temporary permissions when the specified duration ends.

Can I use a client script to request short-lived access to AWS resources like S3?

Yes, you can use a client script to request short-lived access to AWS resources like S3. The script issues requests to a backend API, which creates the permission request and monitors the approval status for actions such as s3:GetObject.

How does an email-based approve or deny cycle work for AWS access requests?

An email-based approve or deny cycle routes submitted AWS permission requests to an approver's inbox. The approver selects Approve or Deny, and the backend API tracks this status to apply or block the temporary permissions accordingly.

Why do I need temporary access for AWS tasks instead of granting broad IAM roles?

You need temporary access for AWS tasks instead of broad IAM roles because granting continuous elevated access is risky. Temporary permissions enforce a controlled workflow with human approval and automatic revocation to minimize security exposure.