安全权限工程师 ACL与后台安全

AdvisoryAudited by Static analysis on May 8, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Incorrect use could accidentally grant or block administrative access, even though the skill is designed to prevent that.

Why it was flagged

The skill is explicitly meant to create or modify administrative access-control wiring, which can affect who can see or use backend features. This is disclosed, purpose-aligned, and paired with validation guidance.

Skill content
Expected Output

- Corrected or newly defined ACL and backend menu wiring.
Recommendation

Use it only on intended backend permission work, review diffs to ACL/menu/controller files, and test both allowed and denied admin-role behavior before deployment.