Skip to content
Get packs

Access Review Assistant

Guides periodic access reviews and certifications across AWS, GitHub and Okta

Source Download skill
Repository
sickn33/agentic-awesome-skills
Stars
49,023
Licence
MIT
Files
2 files

What it does

This skill teaches an AI agent a structured process for auditing who has access to company systems, such as AWS IAM, GitHub organizations and Okta. The agent can outline review cycles, help managers approve, modify or revoke access, flag inactive or over-privileged accounts, and draft audit-ready reports. It also includes example scripts that collect access data read-only and write private review files, with cautions that nothing should be revoked automatically.

Great for

  • Security or IT teams running quarterly or semi-annual access certifications
  • Platform engineers who want a checklist and sample scripts for AWS, GitHub or Okta inventories
  • Compliance staff preparing evidence for an audit

Skip it if

  • Making unattended access changes: the skill itself says inactivity alone must never revoke production service accounts, and a wrong revocation can cause outages
  • Legal or compliance certification: the cadences and SLAs are examples, not validated against any framework
  • Environments where you cannot provide read-only, scoped credentials and verified identity IDs, since matching by display name gives wrong results

Try asking

  • “Create a quarterly access review plan for our AWS accounts and GitHub org, with owners and deadlines”
  • “Help me review the IAM credential report and list users with console access but no MFA”
  • “Draft a remediation and reporting template for our semi-annual access certification”
Step-by-step guide: how to use Access Review AssistantInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the MIT licence and an attribution note.

    access-review.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip access-review.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip access-review.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Run the scripts with read-only credentials and review the output before taking any action
  • Confirm the review scope, authorized reviewers and retention rules with your security team before starting
  • Treat the cadences and SLAs as starting points and align them with your own compliance requirements

What's inside

  • references/details.md
  • SKILL.md

Redistributed unmodified from sickn33/agentic-awesome-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.