authorization-doc-review
A maintenance tool to keep auth documentation aligned with frontend and backend security implementation.
Install
mkdir -p .claude/skills/authorization-doc-review && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/14781" && unzip -o skill.zip -d .claude/skills/authorization-doc-review && rm skill.zipInstalls to .claude/skills/authorization-doc-review
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Review and update authorization documentation when roles, route protection, permissions, or module access behavior change across frontend, backend, and specs.Key capabilities
- →Identify changed modules, routes, pages, or endpoints
- →Classify affected surfaces by access level
- →Verify alignment between frontend and backend enforcement
- →Update access control matrix documentation
- →Update module authorization documentation
- →Ensure tests cover allowed and denied paths
How it works
This skill uses a checklist to identify authorization changes, classify access levels, verify enforcement alignment, and update relevant documentation and tests.
Inputs & outputs
When to use authorization-doc-review
- →Update access control matrix
- →Audit route protection logic
- →Sync backend roles with API specs
- →Validate auth tests
About this skill
Authorization Documentation Review
Use this skill when a change touches roles, route protection, permissions, or module access behavior.
Goal
Keep authorization documentation aligned with implementation across:
- frontend route guards
- backend auth dependencies and role checks
- feature specs
- API specs
- test plans
- central authorization docs
Read First
docs/standards/security/access-control-matrix.mddocs/standards/security/module-authorization.mdfrontend/src/auth/useAuthZ.tsxbackend/app/auth/roles.pybackend/shared/authz.py
Checklist
- Identify every changed module, route, page, or endpoint.
- Classify each affected surface as:
- public
- authenticated
- role-restricted
- Verify frontend and backend enforcement stay aligned.
- Update:
docs/standards/security/access-control-matrix.mdif role meaning changeddocs/standards/security/module-authorization.mdfor affected modules- feature spec / API spec / test plan if the change is feature-scoped
- Ensure tests cover both allowed and denied paths where relevant.
Output
When using this skill, provide:
- affected modules and routes
- required documentation updates
- any mismatches between code and docs
- any missing auth tests
When not to use it
- →The change does not involve roles, route protection, permissions, or module access behavior.
Limitations
- →The skill relies on existing documentation paths for updates.
- →The skill does not automatically implement authorization changes.
- →The skill does not define new authorization rules.
How it compares
This workflow systematically ensures authorization consistency across the stack and updates central documentation, unlike ad-hoc reviews that might miss discrepancies.
Compared to similar skills
authorization-doc-review side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| authorization-doc-review (this skill) | 0 | 4mo | No flags | Intermediate |
| rsyslog-doc | 1 | 2mo | No flags | Beginner |
| authorization-doc-review | 0 | 4mo | No flags | Intermediate |
| writing-a-malware-analysis-report | 0 | 1mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by nicobit
View all by nicobit →You might also like
rsyslog-doc
rsyslog
Guidelines for maintaining structured, RAG-optimized documentation and module metadata.
authorization-doc-review
nicobit
Review and update authorization documentation when roles, route protection, permissions, or module access behavior change across frontend, backend, and specs.
writing-a-malware-analysis-report
meltedinhex
Structures a clear, actionable malware analysis report covering summary,
1password
openclaw
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
security-compliance
davila7
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC.
information-security-manager-iso27001
davila7
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.