skills.rest
docreo
docreoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

signalproof-permissions

Review and govern identity, authorization, privilege, and least-privilege boundaries for systems.

Updated Aug 15, 2026
Search Tags:#authorization#access control#permissions#iam#least privilege#security governance#oauth scopes
One-click install
npx skills add https://github.com/docreo/Signalproof-Skills --skill signalproof-permissions-docreo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: signalproof-permissions
Source: https://github.com/docreo/Signalproof-Skills/tree/main/skills/signalproof-permissions
Command: npx skills add https://github.com/docreo/Signalproof-Skills --skill signalproof-permissions-docreo

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? It prevents uncontrolled privilege expansion by forcing every permission change to be mapped, classified, authorized, and verified before actuation, reducing lockout and over-privilege risks. ## Core Features & Use Cases - Permission Delta Mapping: Maps identity, requested action, target resource, required right, and current effective right to expose the exact delta. - Change Classification: Classifies each request as NO CHANGE REQUIRED, NARROW GRANT JUSTIFIED, EXCESS PRIVILEGE, AUTHORITY REQUIRED, UNKNOWN, or STOP. - STOP Conditions: Halts work when privilege expansion exceeds the approved objective, ownership is unclear, or a change could lock out the owner without recovery. - Use Case: Before granting a CI service account access to a production database, map its current roles, justify a narrow scoped grant with rollback, and verify the effective permission after the change. ## Quick Start Ask the assistant to review the effective permissions of a specific identity on a target resource and classify whether the requested access change is justified.

Frequently Asked Questions about signalproof-permissions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review permissions before granting access to a resource?▼

Map the acting identity, requested action, target resource, required right, and current effective right, then classify the delta. Define exact grant scope, duration, rollback, and verification before making any change.

What is the difference between authentication and authorization in access reviews?▼

Authentication establishes who the acting identity is, while authorization determines what that identity may do on a resource. This skill requires distinguishing the two before evaluating any permission delta.

Does this skill cover OAuth scopes and cloud IAM roles?▼

Yes. Its scope includes filesystem ACLs, service and task rights, database roles, API and OAuth scopes, cloud roles, application permissions, and agent or tool permissions.

When should a permission change request be stopped?▼

Stop when the expansion is broader than the approved objective, effective ownership is unclear, the change could lock out the owner without recovery, or elevation is inferred from technical convenience rather than explicit approval.

Can this skill grant administrator rights or change ACLs directly?▼

No. It explicitly does not grant administrator or root rights, credential use, access expansion, ACL changes, or policy exceptions. It only reviews, classifies, and governs proposed changes under human authority.

Related Skills

Explore More Software Engineering Skills→
colinmxscolinmxs

iam

Automate AWS IAM user, role, and policy management across accounts.

Community
Intermediate
NealschNealsch

Forge-Operational-Change-Management

Classifies, approves, and records operational changes to running production systems.

Community
Intermediate
YukiIto1999YukiIto1999

detecting-aws-cloudtrail-anomalies

Detect anomalous AWS CloudTrail API activity and output a JSON report.

Community
Advanced
daemon-blockint-techdaemon-blockint-tech
7

iam-specialist

Design identity lifecycle, entitlements, and access review programs for enterprise IAM.

Community
Advanced