audit-permissions

Installation
SKILL.md

Plugin check: Run node "${PLUGIN_ROOT}/scripts/check-version.js" — if it outputs a message, show it to the user before proceeding.

Audit Permissions

Audit existing table permissions on a Power Pages code site. Analyze permissions against the site code and Dataverse metadata, then generate a visual HTML report with deterministic 1–5 category scores, an advisory verdict, findings, reasoning, and suggested fixes.

The skill has two parts:

  1. Audit checks (evidence + remediation) — the per-table A–K checklist that compares every permission against real code usage and Dataverse metadata. It is the primary issue detector: it catches concrete, code-grounded problems (missing CRUD, append/appendto, $expand gaps, broken parent chains, over-provisioned grants) and emits each as a major/minor issue with concrete evidence and a fix.
  2. Scoring (reproducible result) — a 3-category rubric (9 dimensions) anchored by a recurring-issue catalog of fixed detection triggers + severities, followed by a single consolidation into root causes and one batched root-cause attribution pass for major issues. It turns the findings into pure-formula 1–5 category scores so two runs on the same configuration yield the same numbers.

Golden rule of scoring: you only ever find and label issues (major / minor). You do NOT invent the numeric score. The 1–5 numbers come from a fixed formula applied to the issue counts (see Appendix A). Same issue set ⇒ same score.

Site type routing

Before reading or executing the workflow below, perform the existing SPA project lookup first.

Installs
255
GitHub Stars
1.1K
First Seen
Mar 17, 2026