New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Performing Access Recertification With Saviynt

by mukul975 in mukul975/Anthropic-Cybersecurity-Skills

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA.

Apache-2.0Auto-check passedLegal & Compliance

Install Performing Access Recertification With Saviynt

skills CLI
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-access-recertification-with-saviynt -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills performing-access-recertification-with-saviynt --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/performing-access-recertification-with-saviynt .claude/skills/performing-access-recertification-with-saviynt && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
performing-access-recertification-with-saviynt
GitHub stars
34k
Token cost
~2.8k tokens
SKILL.md length
719 words
Files
8 (incl. scripts, references, assets)
Skills in repo
644
Repo updated
First seen
Licence
Apache-2.0

At a glance

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA.

  • Works in 5 steps: Configure Campaign Template → Configure Certifier Experience → Launch Campaign via API → …
  • Managing certification campaigns for users/entitlements
  • SKILL.md covers Overview, When to Use, Prerequisites and Core Concepts, plus 3 more sections
  • Runs Python scripts from its folder; needs SAVIYNT_TOKEN

What it does

Performing Access Recertification With Saviynt is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA. Use when launching or managing certification campaigns for users/entitlements, remediating access review findings, or documenting identity governance evidence for an audit.

Its SKILL.md is about 2.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 10 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/api-reference.md` and `references/standards.md`).

It sits in Legal & Compliance, covering Access reviews and audit trails, Healthcare and finance regulation and SOC 2 and security compliance. The repository describes itself as: 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io…. The licence is Apache-2.0.

When your agent uses it

  • Managing certification campaigns for users/entitlements
  • Remediating access review findings
  • Documenting identity governance evidence for an audit

Example prompts

  • “/performing-access-recertification-with-saviynt”

Requirements

  • Python 3
  • A credential in SAVIYNT_TOKEN

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Configure Campaign Template
  2. Configure Certifier Experience
  3. Launch Campaign via API
  4. Monitor Campaign Progress
  5. Execute Remediation

What it can do on your machine

Read from SKILL.md and the folder at commit 54a7988. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 2 files in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.saviyntcloud.com
    • saviynt.com
    • oxfordcomputergroup.com
    • isaca.org

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • SAVIYNT_TOKEN

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Performing Access Recertification With Saviynt loads about 2.8k tokens when it runs, and up to ~4.7k if it reads all its reference files. Until then it costs about 105 tokens; SKILL.md has 719 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~105
When it runs · the whole SKILL.md, loaded when a task matches
~2.8k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~4.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Anthropic-Cybersecurity-Skills at commit 54a7988, republished under its Apache-2.0 licence (© mukul975). 719 words, ~2,759 tokens.

Download SKILL.mdSave it as .claude/skills/performing-access-recertification-with-saviynt/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.
name
performing-access-recertification-with-saviynt
description
Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA. Use when launching or managing certification campaigns for users/entitlements, remediating access review findings, or documenting identity governance evidence for an audit.
domain
cybersecurity
subdomain
identity-access-management
tags
saviynt, access-recertification, identity-governance, compliance, certification-campaign, iga
version
1.0
author
mahipal
license
Apache-2.0
nist_csf
PR.AA-01, PR.AA-02, PR.AA-05, PR.AA-06
mitre_attack
T1078, T1110, T1556, T1098, T1071
mitre_f3.version
1.1
mitre_f3.tactics
initial-access, positioning, defense-impairment, resource-development

Performing Access Recertification with Saviynt

Overview

Access recertification (also called access certification or access review) is a periodic process where designated reviewers validate that users have appropriate access to systems and data. Saviynt Enterprise Identity Cloud (EIC) automates this process through certification campaigns that present reviewers with current access assignments and collect approve/revoke/conditionally-certify decisions. Campaigns can be triggered on schedule (quarterly, semi-annually), event-driven (department transfer, role change), or on-demand. Saviynt provides intelligence features including risk scoring, usage analytics, and peer-group analysis to help reviewers make informed decisions.

When to Use

  • When conducting security assessments that involve performing access recertification with saviynt
  • When following incident response procedures for related security events
  • When performing scheduled security testing or auditing activities
  • When validating security controls through hands-on testing

Prerequisites

  • Saviynt Enterprise Identity Cloud (EIC) tenant with admin access
  • Identity data synchronized from authoritative sources (HR, AD, cloud)
  • Entitlement data imported from target applications
  • Certifier roles assigned (managers, application owners, data owners)
  • Campaign templates defined for each certification type

Core Concepts

Campaign Types
TypeScopeTriggerCertifier
User ManagerAll access for users under a managerScheduled (quarterly)Direct manager
Entitlement OwnerAll users with a specific entitlementScheduled (semi-annually)Entitlement/app owner
ApplicationAll access to a specific applicationScheduledApplication owner
Role-BasedAll users assigned to a specific roleScheduledRole owner
Event-BasedUsers whose attributes changedAttribute change triggerNew manager
Micro-CertificationSingle user, single entitlementOn-demandManager or owner
Certification Decisions
DecisionEffectUse Case
Certify (Approve)Access maintainedAccess is still required
RevokeAccess removal ticket createdAccess no longer needed
Conditionally CertifyAccess maintained with conditionsAccess needed temporarily, review again
DelegateReassign to another certifierCertifier lacks knowledge to decide
AbstainNo decision recordedConflict of interest
Campaign Lifecycle
CONFIGURATION → PREVIEW → ACTIVE → IN PROGRESS → COMPLETED → REMEDIATION
       │            │         │          │             │            │
       │            │         │          │             │            └── Revoke tickets
       │            │         │          │             │                executed
       │            │         │          │             │
       │            │         │          │             └── All decisions
       │            │         │          │                 collected
       │            │         │          │
       │            │         │          └── Certifiers reviewing
       │            │         │              and making decisions
       │            │         │
       │            │         └── Campaign launched,
       │            │             notifications sent
       │            │
       │            └── Read-only preview for validation
       │
       └── Campaign parameters defined

Workflow

Step 1: Configure Campaign Template

In Saviynt Admin Console:

  1. Navigate to Certifications > Campaign > Create New Campaign
  2. Define campaign parameters:
ParameterValue
Campaign NameQ1 2025 Manager Access Review
Campaign TypeUser Manager
DescriptionQuarterly review of all user access
Certifier TypeManager (dynamic - user's direct manager)
Secondary CertifierApplication Owner (fallback if manager unavailable)
Due Date14 days from launch
Reminder ScheduleDay 7, Day 10, Day 13
EscalationAuto-revoke on Day 15 if no decision

  1. Configure scope filters:

    • Include: All active users
    • Exclude: Service accounts, break-glass accounts
    • Application filter: All connected applications

  2. Configure intelligence features:

    • Enable risk scoring (high-risk entitlements highlighted)
    • Enable usage data (last access date shown)
    • Enable peer analysis (compare access to peer group)
    • Enable SoD violation flagging
Show full SKILL.md (302 more words)Show less
Step 2: Configure Certifier Experience

Customize what certifiers see during the review:

Columns Displayed:

  • User name and title
  • Application name
  • Entitlement/role name
  • Risk score (1-10)
  • Last access date
  • Peer group comparison (% of peers with same access)
  • SoD violation flag

Decision Options:

  • Certify with justification (free text)
  • Revoke with reason (dropdown: no longer needed, SoD conflict, role change)
  • Conditionally certify with expiry date

Bulk Actions:

  • Certify all low-risk items
  • Revoke all items not accessed in 90+ days
  • Filter by application, risk level, or SoD status
Step 3: Launch Campaign via API
python
import requests

SAVIYNT_URL = "https://tenant.saviyntcloud.com"
SAVIYNT_TOKEN = "your-api-token"

def create_certification_campaign(campaign_config):
    """Create and launch a Saviynt certification campaign."""
    headers = {
        "Authorization": f"Bearer {SAVIYNT_TOKEN}",
        "Content-Type": "application/json"
    }

    # Create campaign
    response = requests.post(
        f"{SAVIYNT_URL}/ECM/api/v5/createCampaign",
        headers=headers,
        json={
            "campaignname": campaign_config["name"],
            "campaigntype": campaign_config["type"],
            "description": campaign_config["description"],
            "certifier": campaign_config["certifier_type"],
            "duedate": campaign_config["due_date"],
            "reminderdays": campaign_config["reminder_days"],
            "autorevoke": campaign_config.get("auto_revoke", True),
            "autorevokedays": campaign_config.get("auto_revoke_days", 15),
            "scope": campaign_config.get("scope", {}),
        }
    )
    response.raise_for_status()
    campaign_id = response.json().get("campaignId")

    # Launch campaign
    launch_response = requests.post(
        f"{SAVIYNT_URL}/ECM/api/v5/launchCampaign",
        headers=headers,
        json={"campaignId": campaign_id}
    )
    launch_response.raise_for_status()

    return {
        "campaign_id": campaign_id,
        "status": "launched",
        "certifications_created": launch_response.json().get("certificationCount", 0)
    }

def get_campaign_status(campaign_id):
    """Get current status and progress of a campaign."""
    headers = {"Authorization": f"Bearer {SAVIYNT_TOKEN}"}
    response = requests.get(
        f"{SAVIYNT_URL}/ECM/api/v5/getCampaignDetails",
        headers=headers,
        params={"campaignId": campaign_id}
    )
    response.raise_for_status()
    data = response.json()

    return {
        "campaign_id": campaign_id,
        "status": data.get("status"),
        "total_items": data.get("totalLineItems", 0),
        "certified": data.get("certifiedCount", 0),
        "revoked": data.get("revokedCount", 0),
        "pending": data.get("pendingCount", 0),
        "completion_rate": data.get("completionPercentage", 0),
    }
Step 4: Monitor Campaign Progress

Track certification progress and send escalations:

  • Dashboard: Saviynt provides real-time campaign dashboard with completion rates
  • Reminders: Automatic email reminders at configured intervals
  • Escalation: If certifier does not respond by due date, escalate to manager's manager or auto-revoke
  • Delegation: Allow certifiers to delegate specific items to application owners
Step 5: Execute Remediation

After campaign closes:

  1. Auto-Remediation: Saviynt automatically creates provisioning tasks to revoke denied access
  2. Ticket Integration: Revocation tasks create tickets in ServiceNow/Jira for tracking
  3. Grace Period: Configure a grace period (e.g., 5 business days) before access is actually removed
  4. Verification: After revocation, verify access is removed from target systems
  5. Audit Trail: All decisions, revocations, and remediations logged for compliance evidence

Validation Checklist

  • Campaign templates configured for each certification type
  • Certifier roles assigned (managers, app owners, data owners)
  • Risk scoring and usage analytics enabled
  • SoD violation detection configured
  • Reminder and escalation schedules defined
  • Auto-revoke policy for non-responsive certifiers configured
  • Campaign launched and certifiers notified
  • Campaign completion rate > 95% before close
  • Revocation tasks created for all denied entitlements
  • Remediation completed within SLA
  • Campaign report generated for compliance audit
  • Evidence archived for regulatory retention period

References

© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 7 other files (scripts, references, assets) in skills/performing-access-recertification-with-saviynt of mukul975/Anthropic-Cybersecurity-Skills.

  • SKILL.md
  • LICENSE
  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py

Open the folder on GitHubat commit 54a7988

Compare with similar skills

Performing Access Recertification With Saviynt next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Performing Access Recertification With Saviynt compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Performing Access Recertification With Saviynt this skillmukul975/Anthropic-Cybersecurity-Skills34k—~2.8kAutomated safety check: PassApache-2.0
Audit Reportharness/harness-skills115—~1.3kAutomated safety check: PassApache-2.0
Security Compliancesangrokjung/claude-forge8522 repos~7.2kAutomated safety check: PassMIT
Grc Knowledgemlunato47/claude-grc-plugin184—~6.1kAutomated safety check: PassMIT
Ciso Advisoralirezarezvani/claude-skills28k1 repos~1.8kAutomated safety check: PassMIT
Senior Secopsalirezarezvani/claude-skills28k1 repos~4kAutomated safety check: PassMIT

Similar skills

  • Audit Report

    harness/harness-skills

    Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.

    115 GitHub stars~1.3k tokensUpdated 4 days ago
    Legal & ComplianceAuto-check passed

  • Security Compliance

    sangrokjung/claude-forge

    Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and…

    852 GitHub starsUsed in 2 repos~7.2k tokens
    Legal & ComplianceAuto-check passed

  • Grc Knowledge

    mlunato47/claude-grc-plugin

    Senior GRC analyst expertise across 18 compliance frameworks — NIST 800-53, FedRAMP (Rev5 + 20x/CR26, KSIs, VDR/VER, Certification Classes A–D), DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR…

    184 GitHub stars~6.1k tokensUpdated 4 days ago
    Legal & ComplianceAuto-check passed

  • Ciso Advisor

    alirezarezvani/claude-skills

    Security leadership for growth-stage companies. An agent skill from alirezarezvani/claude-skills.

    28k GitHub starsUsed in 1 repo~1.8k tokens
    Legal & ComplianceAuto-check passed

  • Senior Secops

    alirezarezvani/claude-skills

    Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

    28k GitHub starsUsed in 1 repo~4k tokens
    SecurityAuto-check passed

  • Architecting Security

    telagod/code-abyss

    安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust…

    244 GitHub stars~712 tokensUpdated 2 mo ago
    SecurityAuto-check passed

More from mukul975/Anthropic-Cybersecurity-Skills

All 644 skills in this repo

  • Campaign Attribution Evidence Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Weighs infrastructure, TTP, malware code and timing evidence with the Diamond Model and competing hypotheses to reach a confidence-rated attribution.

    34k GitHub stars~2.3k tokensUpdated 1 mo ago
    Auto-check passed

  • Go Malware Analysis in Ghidra

    mukul975/Anthropic-Cybersecurity-Skills

    Walks through reverse engineering Go-compiled malware in Ghidra: parsing buildinfo and pclntab, recovering stripped function names and extracting dependencies.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • LNK and Jump List Forensics

    mukul975/Anthropic-Cybersecurity-Skills

    Guides forensic analysis of Windows LNK shortcut files and Jump Lists with LECmd, JLECmd and manual parsing to show file access and program execution.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • Malware Persistence Analysis with Autoruns

    mukul975/Anthropic-Cybersecurity-Skills

    Hunts Windows malware persistence with Sysinternals Autoruns, covering run keys, services, scheduled tasks and drivers, with baseline comparison.

    34k GitHub stars~1.2k tokensUpdated 1 mo ago
    Auto-check passed

  • NTFS MFT Deleted File Recovery

    mukul975/Anthropic-Cybersecurity-Skills

    Guides a Windows forensic examination of the NTFS Master File Table to recover deleted-file evidence, build timelines and spot timestomping.

    34k GitHub stars~2.7k tokensUpdated 1 mo ago
    Auto-check passed

  • Network Covert Channel Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Detects DNS tunneling, ICMP exfiltration and HTTP-based covert channels in packet captures and DNS logs when hunting for hidden command-and-control traffic.

    34k GitHub stars~2k tokensUpdated 1 mo ago
    Auto-check passed

Categories

Questions about Performing Access Recertification With Saviynt

What does Performing Access Recertification With Saviynt do?

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA. Performing Access Recertification With Saviynt is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA.

When should I use Performing Access Recertification With Saviynt?

Performing Access Recertification With Saviynt fits situations like: managing certification campaigns for users/entitlements; remediating access review findings; documenting identity governance evidence for an audit.

How do I install Performing Access Recertification With Saviynt in Claude Code?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-access-recertification-with-saviynt -a claude-code`. Or copy the skill folder (skills/performing-access-recertification-with-saviynt in mukul975/Anthropic-Cybersecurity-Skills) into .claude/skills/performing-access-recertification-with-saviynt in your project. Claude Code loads it when a task matches its description.

How do I install Performing Access Recertification With Saviynt in Codex?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-access-recertification-with-saviynt -a codex`. Or copy the skill folder (skills/performing-access-recertification-with-saviynt in mukul975/Anthropic-Cybersecurity-Skills) into .agents/skills/performing-access-recertification-with-saviynt in your project. Codex loads it when a task matches its description.

Can I use Performing Access Recertification With Saviynt in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-access-recertification-with-saviynt -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/performing-access-recertification-with-saviynt, .gemini/skills/performing-access-recertification-with-saviynt, .github/skills/performing-access-recertification-with-saviynt and .opencode/skills/performing-access-recertification-with-saviynt in your project.

What does Performing Access Recertification With Saviynt need to run?

Going by SKILL.md and its folder, Performing Access Recertification With Saviynt needs Python for the scripts in its folder and credentials named SAVIYNT_TOKEN. Our summary lists: Python 3; A credential in SAVIYNT_TOKEN.

Does Performing Access Recertification With Saviynt access the network?

SKILL.md names 4 domains. As links in the text: docs.saviyntcloud.com, saviynt.com, oxfordcomputergroup.com and isaca.org. This is read from the text; nothing was executed.

Is Performing Access Recertification With Saviynt safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Performing Access Recertification With Saviynt use?

Performing Access Recertification With Saviynt is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Performing Access Recertification With Saviynt use?

About 2.8k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.9k tokens, read only when the agent opens those files.

What are the alternatives to Performing Access Recertification With Saviynt?

Skills that share tags, products or a category with Performing Access Recertification With Saviynt: Audit Report (harness/harness-skills, 115 stars), Security Compliance (sangrokjung/claude-forge, 852 stars), Grc Knowledge (mlunato47/claude-grc-plugin, 184 stars) and Ciso Advisor (alirezarezvani/claude-skills, 28k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Performing Access Recertification With Saviynt?

mukul975 (a GitHub user) maintains it in mukul975/Anthropic-Cybersecurity-Skills, which has 34,116 GitHub stars. The repository holds 644 skills in this directory. The repository was last updated on August 31, 2026.

Source: mukul975/Anthropic-Cybersecurity-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.