Least-privilege review of IAM policies: spotting wildcard actions, confused-deputy exposure in cross-account roles, and the difference between a resource policy and an identity policy in an access decision.
NewMaintained
Automatic
◆Security & AppSec pack
Last verified 8/3/2026
What it changes
Passed 0 of 22 test cases with the skill, and 22 of 22 without it.
Without skill100%
With skill0%
0 fixed20 passed either way0 still failing2 broke
Pass-rate lift
-100 pp
Tokens
+10%
Agent turns
0%
Response time
+9%
Model gemini-3.6-flashMeasured 8/3/2026v120 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
What's inside
The instructions your model reads when the skill loads.
SKILL.md5 linessingle file
aws-iam-review
Least-privilege review of IAM policies: spotting wildcard actions, confused-
deputy exposure in cross-account roles, and the difference between a resource
policy and an identity policy in an access decision.