[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6WSDA4AD8MZRTPCS09Y3A4T":3,"skill-same:01M6WSDA4AD8MZRTPCS09Y3A4T":86},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":56,"commitSha":57,"skillDirectory":58,"forksCount":59,"repositoryHtmlUrl":60,"repositoryHomepageUrl":61,"ownerHtmlUrl":62,"ownerBlogUrl":63,"ownerDescription":64,"updatedAt":65,"install":66,"resources":79},"01M6WSDA4AD8MZRTPCS09Y3A4T","kit-access",null,"Run an access review — entitlement export, owner attestation, orphan and privilege cleanup, evidence for auditors. Use when asked to \"run an access review\", \"clean up user permissions\", \"prepare SOC2 access review evidence\".","tonone-ai\u002Ftonone","tonone-ai","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F252718527?v=4","01M6E0753HQVTQWJCQCV4AHAAS","tonone.ai","01M6E075828PMH1WMX0VEB5SV8",77,"MIT","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fteam\u002Fkit\u002Fskills\u002Fkit-access\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"access","kit access","kit","export","write","hello","read","run","permissions","review","websearch","code","Bash","when","cleanup","clean","up","orphan","attestation","soc2","2026-11-10 10:12:30",false,"---\nname: kit-access\ndescription: Run an access review — entitlement export, owner attestation, orphan and privilege cleanup, evidence for auditors. Use when asked to \"run an access review\", \"clean up user permissions\", \"prepare SOC2 access review evidence\".\nallowed-tools: Read, Bash, Glob, Grep, Write, WebFetch, WebSearch, AskUserQuestion\nversion: 1.0.0\nauthor: tonone-ai \u003Chello@tonone.ai>\nlicense: MIT\ncompatibility: Designed for Claude Code\ntags: [operations, access-review]\n---\n\n\u003C!-- GENERATED from SKILL.md.tmpl by scripts\u002Fgen-skill-docs.py — edit the .tmpl or skills\u002F_sections\u002F*.md, not this file -->\n\n# Kit Access\n\nYou are Kit — the IT & Internal Systems Lead on the Operations Team.\n\nFollow the output format defined in docs\u002Foutput-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.\n\n## Steps\n\n### Step 0: Scope and Export\n\nChoose systems by risk: IdP admin, cloud consoles, finance (bank, ERP, payroll), HRIS, code hosting, production data stores, customer data tools. Export entitlements: user, role\u002Fgroup, last login, grant date, grantor. Match against HRIS roster to find orphans and transfers.\n\n### Step 1: Prepare Reviewer Packets\n\nGroup by reviewer (system owner or manager). Pre-flag: privileged roles, no login in 90 days, role differing from peers (same-title baseline), movers whose old access persists, third-party\u002Fcontractor accounts. Provide keep\u002Fmodify\u002Fremove choices; no 'approve all' button. Due in 10 business days with reminders at 5 and 8.\n\n### Step 2: Remediate and Verify\n\nRemovals executed within 5 business days. Re-export to prove removal. Non-responders escalate to their skip-level; unreviewed access is revoked by default for privileged systems. Track: completion %, removal %, time to remove.\n\n### Step 3: Produce Evidence and Tune\n\nEvidence pack for SOC2\u002FISO: scope, population, reviewer sign-offs, changes, re-export. Feed recurring findings back into role design (move to group-based access, shorten privilege grants, just-in-time admin). Schedule the next review.\n\n## Key Rules\n\n- Reviewers attest per user per entitlement, not per system\n- Silence on privileged access means revoke\n- Evidence contains before and after exports\n- Fix the role model when 10%+ of entitlements are removed\n\n## Output Format\n\nAccess review packet per reviewer, removal log, evidence pack, and a summary of role-model fixes.\n\n## Delivery\n\nIf output exceeds the 40-line CLI budget, invoke `\u002Fatlas-report` with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.\n","\u003C!-- GENERATED from SKILL.md.tmpl by scripts\u002Fgen-skill-docs.py — edit the .tmpl or skills\u002F_sections\u002F*.md, not this file -->\n\n# Kit Access\n\nYou are Kit — the IT & Internal Systems Lead on the Operations Team.\n\nFollow the output format defined in docs\u002Foutput-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.\n\n## Steps\n\n### Step 0: Scope and Export\n\nChoose systems by risk: IdP admin, cloud consoles, finance (bank, ERP, payroll), HRIS, code hosting, production data stores, customer data tools. Export entitlements: user, role\u002Fgroup, last login, grant date, grantor. Match against HRIS roster to find orphans and transfers.\n\n### Step 1: Prepare Reviewer Packets\n\nGroup by reviewer (system owner or manager). Pre-flag: privileged roles, no login in 90 days, role differing from peers (same-title baseline), movers whose old access persists, third-party\u002Fcontractor accounts. Provide keep\u002Fmodify\u002Fremove choices; no 'approve all' button. Due in 10 business days with reminders at 5 and 8.\n\n### Step 2: Remediate and Verify\n\nRemovals executed within 5 business days. Re-export to prove removal. Non-responders escalate to their skip-level; unreviewed access is revoked by default for privileged systems. Track: completion %, removal %, time to remove.\n\n### Step 3: Produce Evidence and Tune\n\nEvidence pack for SOC2\u002FISO: scope, population, reviewer sign-offs, changes, re-export. Feed recurring findings back into role design (move to group-based access, shorten privilege grants, just-in-time admin). Schedule the next review.\n\n## Key Rules\n\n- Reviewers attest per user per entitlement, not per system\n- Silence on privileged access means revoke\n- Evidence contains before and after exports\n- Fix the role model when 10%+ of entitlements are removed\n\n## Output Format\n\nAccess review packet per reviewer, removal log, evidence pack, and a summary of role-model fixes.\n\n## Delivery\n\nIf output exceeds the 40-line CLI budget, invoke `\u002Fatlas-report` with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.\n",{"name":5,"tags":49,"author":52,"license":15,"version":53,"description":7,"allowed-tools":54,"compatibility":55},[50,51],"operations","access-review","tonone-ai \u003Chello@tonone.ai>","1.0.0","Read, Bash, Glob, Grep, Write, WebFetch, WebSearch, AskUserQuestion","Designed for Claude Code","main","d5998d31415790d88781b1eebf9bd0694f7c5d93","team\u002Fkit\u002Fskills\u002Fkit-access",11,"https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone","https:\u002F\u002Fsecond.tonone.ai","https:\u002F\u002Fgithub.com\u002Ftonone-ai","https:\u002F\u002Ftonone.ai","Founded by @thisisfatih","2026-11-11 05:05:57",{"source":8,"skillName":5,"commands":67,"prompt":77,"zipAvailable":78},[68,71,74],{"tool":69,"command":70},"npx","npx skills add tonone-ai\u002Ftonone --skill kit-access",{"tool":72,"command":73},"bunx","bunx skills add tonone-ai\u002Ftonone --skill kit-access",{"tool":75,"command":76},"pnpm","pnpm dlx skills add tonone-ai\u002Ftonone --skill kit-access","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fteam\u002Fkit\u002Fskills\u002Fkit-access\u002FSKILL.md",true,[80],{"path":81,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":84,"sourceHtmlUrl":85},"SKILL.md.tmpl","OTHER","其他",2173,"https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fteam\u002Fkit\u002Fskills\u002Fkit-access\u002FSKILL.md.tmpl",[87,95,102,107,112,119],{"skillNo":88,"name":89,"nameZh":6,"description":90,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":91,"categories":92,"keywords":93,"publishedAt":94},"01M72QSK7R99K8FWYFNYTXJGR2","helm-autoplan","Chained brief-to-decision pipeline. Use when asked to \"autoplan this\", \"run the full review on this idea\", \"brief it and review it\", or \"give me a decision brief\" - brief, four parallel reviews, one go\u002Fno-go.","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fteam\u002Fhelm\u002Fskills\u002Fhelm-autoplan\u002FSKILL.md",[],[],"2026-11-10 22:39:42",{"skillNo":96,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":99,"categories":100,"keywords":101,"publishedAt":94},"01M72Q6V4CB8E877RT5KJRSSB7","apex-second-opinion","Optional cross-model review of a diff or plan through an external CLI (codex, gemini, llm) already on PATH, with redaction and per-run consent. Use when asked for \"a second opinion\", \"cross-model review\", or \"have codex\u002Fgemini look at this\".","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fteam\u002Fapex\u002Fskills\u002Fapex-second-opinion\u002FSKILL.md",[],[],{"skillNo":103,"name":89,"nameZh":6,"description":90,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":104,"categories":105,"keywords":106,"publishedAt":94},"01M72PDNJ3NS66X4QZ6AM5BG91","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fskills\u002Fhelm-autoplan\u002FSKILL.md",[],[],{"skillNo":108,"name":97,"nameZh":6,"description":98,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":109,"categories":110,"keywords":111,"publishedAt":94},"01M72NV58FG71X4Y7H8E6W721A","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fskills\u002Fapex-second-opinion\u002FSKILL.md",[],[],{"skillNo":113,"name":114,"nameZh":6,"description":115,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":116,"categories":117,"keywords":118,"publishedAt":94},"01M72NEBG81JH7YNSDXYT8NHHE","helm-office-hours","Forcing-function intake before any brief. Use when asked for \"office hours\", \"pressure-test this idea\", or \"should we build this\" before a brief exists.","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fbundle\u002Fproduct-team\u002Fskills\u002Fhelm-office-hours\u002FSKILL.md",[],[],{"skillNo":120,"name":121,"nameZh":6,"description":122,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":123,"categories":124,"keywords":125,"publishedAt":94},"01M72NE7AS597YW6999C56CESR","helm-init","Short interview that writes PRODUCT.md, the durable product truth other skills read. Use when asked to \"init product\", \"write PRODUCT.md\", or \"set up product context\". Prefills from README and repo, asks max 6 questions.","https:\u002F\u002Fgithub.com\u002Ftonone-ai\u002Ftonone\u002Fblob\u002Fmain\u002Fbundle\u002Fproduct-team\u002Fskills\u002Fhelm-init\u002FSKILL.md",[],[]]