user-role-identification
CommunityMake every actor and access boundary explicit.
Legal & Compliance#access control#RBAC#security risk#audit requirements#role identification#tenant boundaries#webhook trust
Authormachenjie
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This skill prevents authorization and security mistakes by ensuring you accurately identify who participates in a change and what each actor can access.
Core Features & Use Cases
- Role inventory first: Builds a complete, typed actor catalog (end users, support, admins, operators, service accounts, external systems, and more) before designing behaviors or permissions.
- Data visibility scoping: Forces explicit declarations of what data each actor can see, what they cannot see (including “all-aggregation” cases), and where tenant boundaries apply.
- Risk-driven handoff: Flags when roles create IDOR, privilege escalation, trust-boundary violations, financial/compliance risks, or audit gaps, and routes to the right downstream modeling skills.
Quick Start
Ask an AI to produce a role inventory for a change affecting order visibility, including actor types, authentication methods, data visibility by object/field, tenant scope, allowed/denied actions, and which downstream models must be invoked.
Dependency Matrix
Required Modules
None requiredComponents
references
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: user-role-identification Download link: https://github.com/machenjie/rd-skills/archive/main.zip#user-role-identification Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.