check-agent-access

Overview

This skill performs an end-to-end privilege audit for Cortex Agents. It discovers every agent in the account, reads each agent's live spec to build a dependency tree, then runs parallel SHOW GRANTS checks to identify privilege gaps for a target role. Results are presented per-agent with ✅ / ❌ status and a one-click remediation script is generated for any gaps found.

When to Use

Use this skill when you need to:

• Verify that a role (e.g. PUBLIC, READER, a custom app role) can call one or more Cortex Agents end-to-end.
• Identify missing USAGE grants on agents, semantic views, Cortex Search services, UDFs, or warehouses.
• Generate a ready-to-run remediation script for access gaps.
• Audit a newly created agent before rolling it out to users.

When NOT to Use