{"slug":"iam-least-privilege-review","source_name":"iam-least-privilege-review","name":"IAM Least-Privilege Review","description":"Reviews an existing IAM / RBAC policy for grants that are broader than the workload needs — wildcard actions (`*`, `s3:*`), `Resource: \"*\"`, unscoped `iam:PassRole`, `NotAction`/`NotResource` inversions, self-grant escalation actions, wildcard principals, and the Kubernetes analogs (`verbs: [\"*\"]`, cluster-wide secret reads, `escalate`/`bind`) — and proposes the scoped-down equivalent for each. Use when tightening an AWS IAM policy, a Kubernetes Role/ClusterRole, or similar access grant. Do NOT use for deciding whether to approve a person's access request, for writing an application's authorization logic, or for secret-scanning.","version":1,"lift":{"pass_rate_delta_pts":null,"pass_rate_pct":42.9,"total_cases":14,"passed_cases":6,"tokens_delta_pct":731.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.5-flash","grading_method":"judged","completed_at":"2026-07-10T04:20:52.366365+00:00"},"skill_score":0.9094650205761318,"benchmark_models":[{"model":"gemini-3.5-flash","headline":false,"delta_pts":null,"with_pass_pct":null,"without_pass_pct":null,"tokens_delta_pct":731.8,"turns_delta_pct":0,"total_cases":14,"cases_aggregated":14,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-10T04:20:52.366365+00:00","run_id":"55f8b734-9852-4574-932d-5562ff039bff","latest_attempt":{"id":"55f8b734-9852-4574-932d-5562ff039bff","runner_model":"gemini-3.5-flash","overall_verdict":"mixed","completed_at":"2026-07-10T04:20:52.366365+00:00","gate":"not_comparable"},"version_number":1,"is_latest_version":true,"gate":"not_comparable"}],"trust":{"skill_safety":"caution","safety_status":"flagged","intent_verdict":"safe","content_status":"clean","indexable":false},"license":null,"install_count":0,"total_uses":350,"total_users":6,"manifest_hash":"6f06e7244b078940231fcd73ebb91cfb78a11f6affbbf9a2ac9d1cd08eea58f3","install_name":"iam-least-privilege-review","version_id":"f42c1156-8702-4460-973b-6f917064914e","body_sha256":"6c8e3077458ad9d8b04ae6d0ce60b6306100b71dc081772b5f490a9a1550f11b","render_hash":"90ae185edca6a9ff721c56914668bf459c5bfa213a1002dd708b2b70c04c0300","raw_url":"https://app.decimal.ai/s/iam-least-privilege-review/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/iam-least-privilege-review"}