starlake-ai/iam-policies
.agents/skills/iam-policies/SKILL.md
Apply IAM (Identity and Access Management) policies
$ install --global
skillsauthnpx skillsauth add starlake-ai/starlake-skills iam-policiesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 3:36 AM10.7s1 file scanned
SKILL.md
- name:
- iam-policies
- description:
- Apply IAM (Identity and Access Management) policies
IAM Policies Skill
Applies IAM (Identity and Access Management) policies defined in your project configuration. This sets up permissions, roles, and access controls on your data warehouse resources (e.g., BigQuery datasets, tables).
Usage
starlake iam-policies [options]
Options
--accessToken <value>: Access token for authentication (e.g. GCP)--reportFormat <value>: Report output format:console,json, orhtml
Configuration Context
IAM policies are configured in the application and table-level YAML files:
Application-Level Access Policies
# metadata/application.sl.yml
version: 1
application:
accessPolicies:
apply: true
location: EU
taxonomy: RGPD
Table-Level ACL
# In table.sl.yml or task.sl.yml
table:
acl:
- role: "roles/bigquery.dataViewer"
grants:
- "user:[email protected]"
- "group:[email protected]"
IAM Policy Tags (Excel-based)
IAM policy tags can be managed via Excel files and converted using xls2yml:
starlake xls2yml --files metadata/iam-policy-tags.xlsx --iamPolicyTagsFile true
Examples
Apply All IAM Policies
starlake iam-policies
Apply with Access Token
starlake iam-policies --accessToken $GCP_TOKEN
Related Skills
- secure - Apply RLS/CLS security policies
- xls2yml - Convert IAM policy tags from Excel to YAML
- config - Configuration reference (access policies)
Related Skills
starlake-ai/starflow-transform-design
development
VerifiedTrustedCommunity
Design SQL transformations for data pipelines with quality checks and dependency management. Use when the user says "design transforms" or "create SQL transformations".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-sprint-planning
devops
VerifiedTrustedCommunity
Plan and track sprint progress for data pipeline implementation. Use when the user says "sprint planning" or "plan data sprint".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-source-analysis
testing
VerifiedTrustedCommunity
Analyze data sources in depth: schema, quality, volume, and extraction strategy. Use when the user says "analyze data source" or "profile this data source".
1SKILL.mdUpdated Apr 16, 2026
starlake-ai/starflow-schema-design
data-ai
VerifiedTrustedCommunity
Design Starlake-compatible table schemas with types, constraints, privacy, and expectations. Use when the user says "design schema" or "create table definition".
1SKILL.mdUpdated Apr 16, 2026