Best access reviews and audit trails skills for Claude Code, Codex and other agents.

Manages Google Cloud Privileged Access Manager entitlements and grants: create and edit entitlements, request temporary access, and approve or deny pending grants.

google/skills

Django access control and IDOR security review. An agent skill from getsentry/skills.

getsentry/skills

Installs hooks that check each agent action against security policies before it runs, blocking destructive commands and logging every decision.

pegasi-ai/reins

Productize a working prototype by adding a bounded set of explicitly requested operational or product services.

Dimon94/skills

Designs and audits who can reach what — authentication, authorization models, privileged access, service credentials, and joiner-mover-leaver process.

cbrock84/headcount

Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.

harness/harness-skills

Command reference for omniroute's audit, logs, policy and telemetry commands: search and export audit trails, manage access policies and review request history for compliance work.

diegosouzapw/OmniRoute

Walks through designing, wiring and reviewing an audit trail in TypeScript or JavaScript apps with evlog: typed actions, denials, diffs and tests.

evloghq/evlog

Installs and configures the WizTelemetry Auditing extension for KubeSphere, which collects and stores Kubernetes audit events, and covers the audit query API.

kubesphere/kubesphere

Conduct periodic access reviews and certifications. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Helps you triage a quarterly user access review from an Okta, Azure AD, AWS IAM, GitHub, or generic CSV/JSON export.

GRCEngClub/claude-grc-engineering

Access matrix of role-by-module permissions, with per-role scope, confidentiality level and SME tier, as CSV, SQL, JSON Schema or Notion on request.

sickn33/agentic-awesome-skills

Admin account register: system, main and backup admin, seats, plan, 2FA, shared logins and access-review dates, as CSV, SQL, JSON Schema or Notion on request.

sickn33/agentic-awesome-skills

Mailbox and licence register: employee, account type, aliases, groups, tool, licence cost, 2FA and password policy state, and access-review dates.

sickn33/agentic-awesome-skills

Configure Microsoft Entra Privileged Identity Management (PIM) to convert standing privileged assignments into eligible, time-bound roles requiring justification, MFA, and approval, covering Entra…

mukul975/Anthropic-Cybersecurity-Skills

Implements continuous, risk-adaptive identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based conditional access, and identity governance aligned with NIST SP…

mukul975/Anthropic-Cybersecurity-Skills

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA.

mukul975/Anthropic-Cybersecurity-Skills

Conducts systematic reviews of privileged accounts to validate access rights, identify excessive or stale permissions, and enforce least privilege across PAM infrastructure.

mukul975/Anthropic-Cybersecurity-Skills

Runs entitlement review and access certification campaigns in SailPoint IdentityIQ, covering manager certifications, targeted entitlement reviews, role-based access validation, segregation-of-duties…

mukul975/Anthropic-Cybersecurity-Skills

Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering joiner-mover-leaver (JML) automation, role mining, access requests…

mukul975/Anthropic-Cybersecurity-Skills

Designs and runs access review and certification campaigns-scoping, reviewer selection, risk-based prioritization, micro-certification, and remediation tracking-to verify user access matches job…

mukul975/Anthropic-Cybersecurity-Skills

Expert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Load a Spec Kitty agent profile on demand for interactive sessions, including identity, governance scope, boundaries, and initialization.

spec-kitty/spec-kitty

Deploys SailPoint IdentityNow or IdentityIQ for identity governance and administration, covering identity lifecycle management, access request workflows, certification campaigns, role mining…

mukul975/Anthropic-Cybersecurity-Skills

Guidance for Microsoft Entra Privileged Identity Management (PIM) — just-in-time, time-bound, approval-based, audited elevation for Entra roles, Azure resource roles, and privileged groups.

vinayaklatthe/microsoft-security-skills

Audits all guest and external user access on the current SharePoint site.

pnp/sharepoint-skills

A skill your agent uses when the user asks "who has access", "audit permissions", "check user roles", "list API keys", "review access controls", "rotate API keys", "create API key", "delete expired…

coralogix/cx-cli

Create a read-only permission and sharing access review report as a self-contained HTML file saved to SharePoint.

pnp/sharepoint-skills

Maintain or migrate EF6-based applications with realistic guidance on what to keep, what to modernize, and when EF Core is or is not the right next step.

managedcode/dotnet-skills

Executes joiner, mover and leaver processes — provisioning, group membership, access changes on role change, and complete deprovisioning.

cbrock84/headcount

Designs and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit.

cbrock84/headcount

Dropbox Business API integration with managed OAuth. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Guidance for Microsoft Entra ID Governance — automating identity lifecycle and access with entitlement management (access packages), access reviews, lifecycle workflows for joiner-mover-leaver…

vinayaklatthe/microsoft-security-skills

SOC2 Type II compliance - Trust Service Criteria, access controls, audit logging, change management, incident response, evidence collection

vibeeval/vibecosystem