Enforces dual control and role separation to improve system security and compliance.
Install
mkdir -p .claude/skills/segregation-of-duties && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/10247" && unzip -o skill.zip -d .claude/skills/segregation-of-duties && rm skill.zipInstalls to .claude/skills/segregation-of-duties
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Role separation, compensating controls for single-person operations, dual controlKey capabilities
- →Enforce role separation
- →Implement dual control
- →Audit access permissions
How it works
It audits access levels and automates approval workflows to ensure secure operations.
Inputs & outputs
When to use Segregation of Duties
- →Set up dual control for deployment
- →Review access permissions
- →Audit segregation of duties
About this skill
🔀 Segregation of Duties Skill
🎯 Purpose
Enforce role separation and implement compensating controls for single-person operations.
Key Principle: "One person shouldn't have unchecked power over critical processes."
📚 Scope
- 🔐 Role Separation Requirements
- 🛡️ Compensating Controls (single-person company context)
- 🔄 Dual Control Processes
- 📊 Access Reviews
- ⚖️ Conflict of Interest Prevention
⚙️ Security Rules
MUST Requirements
role_separation:
development_vs_production:
- separate_accounts: dev_and_prod_aws_accounts
- approval_required: pr_review_before_merge
- automated_testing: ci_cd_pipeline_validation
financial_vs_technical:
- separate_tools: different_systems_for_finance_and_tech
- audit_trail: all_transactions_logged
- third_party_validation: accountant_reviews_financials
compensating_controls:
single_person_company:
- automation: ci_cd_prevents_manual_errors
- third_party_review: external_auditor_or_consultant
- documentation: all_changes_documented_and_logged
- transparency: public_isms_for_client_review
dual_control_processes:
production_deployment:
- automated_pipeline: github_actions_with_tests
- manual_approval: ceo_approval_via_pr_merge
- rollback_capability: immediate_rollback_if_issues
financial_transactions:
- bank_requires_bkid: separate_authentication_factor
- accountant_review: quarterly_financial_review
- audit_trail: all_transactions_logged_in_accounting_software
MUST NOT Prohibitions
prohibited:
- bypass_controls: skip_ci_cd_and_deploy_directly
- self_approve_financials: no_external_validation
- delete_audit_logs: remove_evidence_of_actions
- shared_credentials: use_same_password_everywhere
💡 Example: Production Deployment Controls
deployment_process:
development:
developer: ceo_creates_feature_branch
testing: automated_unit_e2e_security_tests
code_review: self_review_with_ai_assistance
pre_production:
pull_request: github_pr_to_main_branch
automated_checks:
- sonarcloud: code_quality_security_scan
- dependabot: dependency_vulnerability_check
- codecov: test_coverage_minimum_80_percent
approval: ceo_approves_pr_after_all_checks_pass
production:
automated_deployment: github_actions_on_merge
monitoring: cloudwatch_alarms_for_errors
rollback: automated_rollback_on_failure
post_deployment:
verification: smoke_tests_in_production
documentation: changelog_updated
audit_log: deployment_recorded_in_cloudtrail
🔗 Integration
Policies: Information Security, Change Management
Skills: access-control, secure-development
Frameworks: ISO 27001 A.8.2, SOC 2 CC6.3, NIST CSF PR.AC-04
📋 Document Control
- Version: 1.0 | Updated: 2026-02-10
- License: Apache-2.0
- Classification:
When not to use it
- →Bypassing security controls
Prerequisites
Limitations
- →Requires adherence to security policies
How it compares
It provides a structured framework for compensating controls in single-person operations.
Compared to similar skills
Segregation of Duties side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| Segregation of Duties (this skill) | 0 | 6mo | No flags | Advanced |
| secrets-management | 5 | 3mo | Review | Advanced |
| healthcheck | 10 | 2mo | Review | Intermediate |
| secops-setup-antigravity | 4 | 7mo | Review | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by Hack23
View all by Hack23 →You might also like
secrets-management
wshobson
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
healthcheck
openclaw
Host security hardening and risk-tolerance configuration for OpenClaw deployments. Use when a user asks for security audits, firewall/SSH/update hardening, risk posture, exposure review, OpenClaw cron scheduling for periodic checks, or version status checks on a machine running OpenClaw (laptop, workstation, Pi, VPS).
secops-setup-antigravity
Helps the user configure the Google SecOps Remote MCP Server for Antigravity. Use this when the user asks to "set up" or "configure" the security tools for Antigravity.
cloud-penetration-testing
davila7
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
security-scanning-security-hardening
sickn33
Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.
secrets-manager
itsmostafa
AWS Secrets Manager for secure secret storage and rotation. Use when storing credentials, configuring automatic rotation, managing secret versions, retrieving secrets in applications, or integrating with RDS.