access-control-designer
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a set of best practices for application-level authorization, focusing on centralized policy enforcement (Pundit/FastAPI) and consistent UI gating (CASL). It explicitly distinguishes application roles from agent-level permissions.
- [REMOTE_CODE_EXECUTION]: All referenced external dependencies (such as
@casl/ability,@casl/react, and TanStack Query) are well-known, industry-standard libraries used for their intended purposes in web development. - [DATA_EXPOSURE]: The skill includes patterns for automated testing that read local project documentation (e.g.,
docs/access-control/matrix.md) to verify permission consistency. These are standard development workflows and do not involve sensitive system files or credentials. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing and generating logic based on permission matrices, it mitigates injection risks by requiring that permission keys be defined in code, preventing arbitrary external data from creating unvalidated authorization paths.
Audit Metadata