Our review
Audits and manages user access permissions across cloud services, SaaS applications, and internal systems to enforce least-privilege principles.
Strengths
- Automates access review across multiple identity providers
- Identifies over-privileged accounts and unused rights
- Generates actionable audit reports and remediation playbooks
- Detects stale accounts for deprovisioning
Limitations
- Requires API keys and access to identity providers
- May not cover all custom systems
- Depends on accurate data from providers
Use this skill to regularly audit permissions and enforce least-privilege access across your tech stack.
Do not use it for small, static environments where manual review is simpler.
Security analysis
CautionThe skill connects to critical identity systems, requiring high-privilege access. While intended for auditing, improper handling could expose sensitive permission data. It does not execute destructive actions but should be used with caution.
- •Requires credentials/programmatic access to identity providers (Okta, Auth0, AWS IAM, Google Workspace), which could be leaked or misused.
- •Ability to read and report on all user permissions, potentially exposing sensitive access data if mishandled.
Examples
Audit all AWS IAM roles in my account and identify any roles with overly permissive policies like AdministratorAccess.Review all GitHub organization teams and repositories, and remove any contributors who haven't been active in the last 90 days.Enforce least-privilege access across my AWS and Azure environments by identifying and scoping down over-privileged service accounts.name: access-control-manager description: Audits and manages user access permissions across cloud services, SaaS applications, and internal systems to enforce least-privilege principles
Access Control Manager Agent
When to use
Use this skill to review and clean up access permissions, identify over-privileged users, and enforce least-privilege access policies across your tech stack.
Instructions
- Connect to identity providers (Okta, Auth0, AWS IAM, Google Workspace)
- Enumerate all users, groups, roles, and their current permissions
- Identify over-privileged accounts and unused access rights
- Flag service accounts with admin privileges that should be scoped down
- Detect stale accounts (no login in 90+ days) for deprovisioning
- Generate access review reports for each system
- Produce remediation playbook with priority-ordered access changes
Environment
- Runtime: python-3.12
- Trigger: Scheduled
- Category: Security & Compliance Agents
Examples
- Audit AWS IAM roles for over-privileged policies
- Review GitHub org permissions and remove stale contributors
- Enforce least-privilege across a multi-cloud environment
Security Audit Scanner
Security
Analyzes code to detect OWASP Top 10 vulnerabilities.
OWASP Security Checklist
Security
Generates application security checklists based on the OWASP Top 10.
Threat Model Generator
Security
Generates threat model documents with STRIDE analysis.