Guide · Agent skill
How to use the Access Matrix Builder agent skill
Updated · written with AI from the project's own documentation and checked against our catalogue data
The access-matrix skill is a set of instructions that an AI agent can load to help you map which roles can see and change which modules in a business, then run a recurring access review. It is useful if you run a small business or operations team and want a clear record of who can access which systems or data. This guide explains what the skill does, how to install it, how to trigger it with plain requests, and what to check before relying on its output.
Quick start
- 1Download the ZIP. Get the access-matrix ZIP from this page. It contains SKILL.md.
- 2Unzip into a skills folder. Extract it into ~/.claude/skills/ for all projects, or into a project's .claude/skills/ folder for one project.
- 3Or upload in the Claude apps. In the Claude apps, go to Settings → Capabilities → Skills and upload the skill.
- 4Describe your access situation. State who needs access to what in plain language, such as who can see or change invoices.
- 5Answer the missing-fact questions. Reply to the agent's short questions, or say unknown for anything you do not know.
- 6Request the format you need. Ask for CSV, SQL, JSON Schema or Notion if you want a file or mapping; otherwise take the recommendation.
- 7Set up a recurring review. Schedule the review, record reviewer, approval, evidence date and next review date, and remove access promptly when people leave.
What is an agent skill and what does access-matrix do?
An agent skill is a folder containing a SKILL.md file of instructions that an AI agent reads when a task matches the skill's description. This one is named access-matrix and is described as an access matrix of role-by-module permissions, with per-role scope, confidentiality level and SME tier.
By default the agent gives a short recommendation rather than a finished spreadsheet. It suggests keeping the matrix in the tool your team already reviews in and treating it as a recurring review, with a quarterly cadence as a starting point. Artifacts are produced only when you ask for them.
- Recommends a simple access review workflow: role list, system inventory, access rows, quarterly review, removal.
- On request, produces the matrix as CSV, SQL DDL, JSON Schema, or a Notion import mapping.
- Defaults to empty templates and denies access unless explicitly granted.
- Records unknown details as unknown rather than inventing facts about your company.
How do you install the access-matrix skill?
Download the ZIP for this skill from this page. It contains the SKILL.md file. Then choose one of two routes.
For Claude Code, unzip the download into ~/.claude/skills/ to make it available across your projects, or into a project's .claude/skills/ folder to limit it to that project.
In the Claude apps, you can instead upload the skill under Settings → Capabilities → Skills.
- Personal install: unzip into ~/.claude/skills/
- Project install: unzip into the project's .claude/skills/ folder
- Claude apps: Settings → Capabilities → Skills, then upload
How do you trigger the skill with natural requests?
You do not need a special command. Describe the situation in plain language and the agent will match it to the skill. The skill's guidance covers requests about who can access what, role permission matrices, access control spreadsheets, and who sees which data. It also responds to phrases like what each role can see and change.
The agent first works out your intent. If you say set up or build, it moves toward artifacts. If you say review or audit, it checks what you share rather than building anything new. If you ask how to do something, it answers directly and offers a build only if useful.
- "Help me set up an access matrix for our five staff and two contractors."
- "Is this access list right? Here is our sheet."
- "Export our role-by-module permissions as CSV for Excel."
- "How do I run a quarterly access review?"
What information should you have ready?
The agent asks only for what it does not already know, one question at a time, and stops once the answers would not change the output. Topics include the system or data in scope, how many roles exist, who the owner, admin and line managers are, whether access is view-only or editing, any confidential areas, how often access is reviewed, and how access is tracked now.
If you do not know an answer, say so. The skill records it as unknown and continues.
What do the outputs look like?
When you request a CSV, the agent produces columns for each role such as Owner / CEO, Board, Finance, Tax, HR, IT & Admin, Department Head, Line Manager, Employee, Intern, Client and Confidential, plus module details. The CSV uses UTF-8 with a byte order mark so Excel opens it correctly. A CSV holds no data types, so you will need to set number, date or currency formats yourself in the columns that need them.
An SQL request gives a CREATE TABLE statement for an access_matrix table. A JSON request gives a JSON Schema for the same fields. A Notion request is handled by the separate notion-manual-import skill, which provides the CSV, property mapping, import steps and a verification checklist. Excel workbooks (.xlsx) are created only if you specifically ask for one.
CREATE TABLE access_matrix (
module VARCHAR(255),
module_id SERIAL PRIMARY KEY,
...
);What does the skill need and what are its safety notes?
The skill lists no requirements. It does not run scripts and does not use the network. Its output is general templates and recommendations, not verified controls.
Per its own guidance, it does not handle payroll, tax filing or legal advice. A requested review may use data you supply during the conversation, but the skill only compares grants when you provide the data. It does not check live system permissions. For Notion, it never asks for a password or token, and any workspace changes require verified tool access first. Saying you are connected is not treated as evidence.
- Requires: nothing listed
- Runs scripts: no
- Uses network: no
- Not for payroll, tax filing, legal advice or regulated-system access control
- Does not check live permissions; compare grants only with data you supply
What people use it for
- Setting up a first access list for a small business with a few roles and systems.
- Preparing a spreadsheet of role permissions for an operations-led access review.
- Converting an existing access list into CSV for import into Excel or a database.
- Creating a Notion-ready access table with a property mapping and import checklist.
- Checking a current access list you paste into the chat for gaps against your intended grants.
Frequently asked questions
How do I install the access-matrix agent skill?
Download the ZIP from this page and unzip it into ~/.claude/skills/ for all projects, or into a project's .claude/skills/ folder for one project. In the Claude apps, you can upload it under Settings → Capabilities → Skills.
Is the access-matrix skill free and what is its licence?
The item is listed under the MIT licence. This page does not state any price, so check the source repository for any terms beyond the licence.
What does the skill need to run?
The skill lists no requirements. It does not run scripts and does not use the network, so it works from your instructions and the data you type into the chat.
Can the skill check my real system permissions?
No. It only compares grants when you supply the data. It does not verify live permissions in your systems.
Is this skill suitable for regulated systems or payroll?
No. It produces general templates and recommendations rather than verified controls, and it excludes payroll, tax filing and legal advice. Use a qualified professional for regulated access control.
What is an alternative if I only need a simple access spreadsheet?
You can build the matrix by hand in any spreadsheet using the role and module columns this skill describes. The skill mainly adds a review process and structured export formats.
New agent skills, repos and AI tools — every week
The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.
Our verdict
Use this skill if you are a small business owner or operations lead who wants a clear role-by-module access list, a recurring review routine, and CSV, SQL, JSON Schema or Notion output. Pick something else if you need live checks of real system permissions, verified controls for regulated systems, or advice on payroll, tax or legal matters.
Download the skill