360 Secure SkillHub
360 安全技能中心

permission-auditor

以 Node 模块形式提供三项能力:auditToolUsage 分析工具使用日志、checkPermissions 校验权限范围是否过度、generateReport 生成安全审计报告,并提供 CLI 演示命令。输出涵盖高风险操作检测、权限范围校验与安全建议。材料未说明日志来源、远程接口或权限变更执行能力。

jpengcheng523-netizen
jpengcheng523-netizen
热度 44.18
最近更新 2026-05-11 17:36:49
分类:安全依赖:代码执行应用场景:报告撰写 / 数据处理 / 代码审查

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add jpeng-permission-auditor
Metadata
name
permission-auditor
description
Audit tool usage patterns and permissions to identify security risks and excessive access. Use when you need to review tool usage, check for permission issues, or generate security audit reports.

Permission Auditor

Review tool usage and permissions.

Usage

const { auditToolUsage, checkPermissions, generateReport } = require('./skills/permission-auditor');

// Audit tool usage from logs
const audit = auditToolUsage(toolLogs);

// Check if permissions are excessive
const issues = checkPermissions(requiredPermissions, grantedPermissions);

// Generate security report
const report = generateReport(audit);

CLI

node skills/permission-auditor/index.js demo

Features

  • Tool usage pattern analysis
  • High-risk operation detection
  • Permission scope verification
  • Security recommendations
  • Audit report generation