rbac-policy-tester

Generate permission matrices and validate RBAC authorization coverage for roles, resources, and actions.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/Camilo8902/GabyCosmetics --skill rbac-policy-tester
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rbac-policy-tester
Source: https://github.com/Camilo8902/GabyCosmetics/tree/main/.claude/skills/rbac-policy-tester
Command: npx skills add https://github.com/Camilo8902/GabyCosmetics --skill rbac-policy-tester

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures that your Role-Based Access Control (RBAC) system is robust and doesn't introduce regressions by creating comprehensive permission tests.

Core Features & Use Cases

  • Permission Matrix Testing: Defines and tests permissions across different roles, resources, and actions.
  • CI Gating: Integrates with CI pipelines to prevent deployment of code that breaks authorization.
  • Authorization Coverage: Verifies that both allowed and denied access attempts are handled correctly.
  • Use Case: Before merging a new feature that modifies user roles, run this Skill to automatically confirm that existing permissions remain intact and new ones are correctly enforced.

Quick Start

Use the rbac-policy-tester skill to generate a test matrix for all defined roles and resources.

Frequently Asked Questions about rbac-policy-tester

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test role-based access control policies for authorization coverage?

To test role-based access control policies, generate a comprehensive permission matrix validating all roles, resources, and actions with positive and negative cases. This verifies authorization coverage and prevents regressions when modifying user permissions.

Can I use permission testing to gate CI pipelines and prevent authorization regressions?

Yes, RBAC permission testing supports CI gating by validating authorization coverage before deployment. Integrating these tests into your pipeline prevents merging code that breaks existing access control rules or introduces permission regressions.

What is a permission matrix and how does it validate access control?

A permission matrix defines and tests permissions across different roles, resources, and actions. It validates access control by mapping every combination to verify that allowed and denied access attempts are handled correctly without regressions.

How do I generate positive and negative test cases for RBAC authorization?

Generate RBAC test cases by creating a matrix that validates both positive scenarios where access is granted and negative scenarios where access is denied. This ensures all roles, resources, and actions are tested for correct authorization enforcement.

Does RBAC permission testing work without external dependencies?

RBAC permission testing operates without external dependencies, generating a standalone test matrix for your defined roles and resources. This allows you to validate authorization coverage and monitor RBAC integrity independently before merging role modifications.