360 Secure SkillHub
360 安全技能中心

permission-auditor

核心功能含工具使用模式分析、高风险操作检测、权限范围验证、安全建议及审计报告生成。适合需审查工具使用、排查权限过度授予等问题、生成安全审计报告的场景。支持代码调用与CLI运行,输入工具日志、权限数据,输出审计结果、问题清单或审计报告。

jpengcheng523-netizen
jpengcheng523-netizen
热度 44.20
最近更新 2026-05-11 17:36:49
分类:安全依赖:代码执行 / 读写文件应用场景:报告撰写 / 数据处理 / 法律文档

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add jpeng-permission-auditor
Metadata
name
permission-auditor
description
Audit tool usage patterns and permissions to identify security risks and excessive access. Use when you need to review tool usage, check for permission issues, or generate security audit reports.

Permission Auditor

Review tool usage and permissions.

Usage

const { auditToolUsage, checkPermissions, generateReport } = require('./skills/permission-auditor');

// Audit tool usage from logs
const audit = auditToolUsage(toolLogs);

// Check if permissions are excessive
const issues = checkPermissions(requiredPermissions, grantedPermissions);

// Generate security report
const report = generateReport(audit);

CLI

node skills/permission-auditor/index.js demo

Features

  • Tool usage pattern analysis
  • High-risk operation detection
  • Permission scope verification
  • Security recommendations
  • Audit report generation