access-lifecycle
Use when preparing or running a user access review, checking that leavers lost their access, finding orphaned or ownerless service accounts, answering an auditor's access-control request for SOC 2, ISO 27001, PCI DSS, HIPAA or NIST 800-53, or checking whether a finished review ca
Install caution
Risk: Low
Source: OpenClaw Master Skills
Path: skills/access-lifecycle/SKILL.md
Review flags: shell command snippets. These are review signals, not definitive security judgments; inspect before installing.
Required permissions
- • Shell commands
Permissions are inferred from SKILL.md text only. They are review prompts, not guarantees about runtime behavior.
Risk flags explained
Contains shell command snippets. Review commands before copy/paste or agent execution.
Score explanation
Trust
- • Trust starts at 90 before review-signal penalties and metadata bonuses.
- • Risk-signal penalty: -8 from 1 detected flag(s).
- • Metadata bonus: +2 from author/version/description fields.
Utility
- • Utility starts at 55 and rewards clear descriptions, runnable examples, and explicit setup needs.
- • Description present: yes.
- • Command examples detected: 3.
- • Environment variables detected: 0.
Momentum
- • Momentum starts at 45 and uses public repo activity signals.
- • Recent commit activity: latest repo update was 1 day(s) ago.
- • Recent commit volume: 13 commit(s) in the lookback window (+20).
- • Source has strong public adoption: 2182 stars.
- • Fork activity suggests reuse: 331 forks.
Overall
- • Overall score weights trust 45%, utility 35%, and momentum 20%.
Detected signals
Env vars
None detected in SKILL.md text scan.
Commands
- • python scripts/access_diff.py --roster hr_roster.csv --accounts accounts.csv --inactive-days 90 --privileged-review-days 90 --as-of 2026-10-31
- • python scripts/access_review_campaign.py --decisions campaign.csv --population accounts.csv --remediation-days 10 --close-date 2026-10-20
- • python scripts/control_evidence_mapper.py --diff diff.json --campaign campaign.json --framework soc2,iso27001
URLs
None detected in SKILL.md text scan.
Provenance & evidence
SkillRadar makes each review traceable back to the exact source path, source blob SHA, scanner version, and text-only policy that produced the report.
Evidence snippets
…looked at. Each script catches one class of these before the auditor does. ## Workflow ```bash # 1 - Diff: who has access that the HR roster says they should not? python scripts/access…
Watch this skill
Get alerted when this skill adds credential requirements, shell commands, external domains, remote installer patterns, or risk-level changes.
Join watchlist betaMethodology note
SkillRadar scans SKILL.md as hostile text only. It does not execute commands, install packages, or load third-party skills.