starlake-ai/acl-dependencies
.agents/skills/acl-dependencies/SKILL.md
Generate ACL (Access Control List) dependencies graph
$ install --global
skillsauthnpx skillsauth add starlake-ai/starlake-skills acl-dependenciesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:36 AM15.7s1 file scanned
SKILL.md
- name:
- acl-dependencies
- description:
- Generate ACL (Access Control List) dependencies graph
ACL Dependencies Skill
Generates a visual graph showing the relationships between users/groups and the tables they have access to, based on ACL (Access Control List) definitions in your YAML configurations.
Usage
starlake acl-dependencies [options]
Options
--output <value>: Output file path (default: console output)--grantees <value>: Comma-separated list of users/groups to include (default: all)--reload: Reload YAML files from disk before computing--svg: Generate SVG image--png: Generate PNG image--json: Generate JSON output--tables <value>: Comma-separated list of tables to include (default: all)--all: Include all ACLs in the output--reportFormat <value>: Report output format:console,json, orhtml
Configuration Context
ACL dependencies are derived from acl and rls definitions in table/task YAML files:
# In table.sl.yml or task.sl.yml
table:
acl:
- role: "roles/bigquery.dataViewer"
grants:
- "user:[email protected]"
- "group:[email protected]"
rls:
- name: "USA only"
predicate: "country = 'USA'"
grants:
- "group:[email protected]"
Examples
Generate Full ACL Graph as SVG
starlake acl-dependencies --svg --output acl.svg --all
Filter by Specific Users
starlake acl-dependencies --grantees "user:[email protected],group:analytics_team" --svg --output acl.svg
Filter by Specific Tables
starlake acl-dependencies --tables starbake.orders,starbake.customers --svg --output acl.svg
Generate JSON Output
starlake acl-dependencies --json --output acl.json --all
Generate PNG Image
starlake acl-dependencies --png --output acl.png --all
Related Skills
- secure - Apply RLS/CLS security policies
- iam-policies - Apply IAM policies
- lineage - Task dependency lineage
- table-dependencies - Table relationship graph
Related Skills
starlake-ai/starflow-transform-design
development
VerifiedTrustedCommunity
Design SQL transformations for data pipelines with quality checks and dependency management. Use when the user says "design transforms" or "create SQL transformations".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-sprint-planning
devops
VerifiedTrustedCommunity
Plan and track sprint progress for data pipeline implementation. Use when the user says "sprint planning" or "plan data sprint".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-source-analysis
testing
VerifiedTrustedCommunity
Analyze data sources in depth: schema, quality, volume, and extraction strategy. Use when the user says "analyze data source" or "profile this data source".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-schema-design
data-ai
VerifiedTrustedCommunity
Design Starlake-compatible table schemas with types, constraints, privacy, and expectations. Use when the user says "design schema" or "create table definition".
1SKILL.mdUpdated Apr 16, 2026