Group Membership Audit — Security skill for Claude Code
Audit Entra/AD group memberships — who's in a group, a user's full group list, nested/dynamic groups, and stale access (offboarding leftovers).
How to install Group Membership Audit
Installs to ~/.claude/commands/qfermions-aegis-group-membership-audit.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/qFermions/Aegis/HEAD/.claude/commands/group-membership-audit.md -o ~/.claude/commands/qfermions-aegis-group-membership-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Group Membership Audit does
description: Audit Entra/AD group memberships — who's in a group, a user's full group list, nested/dynamic groups, and stale access (offboarding leftovers). Portal first. Placeholders only. disable-model-invocation: true
/group-membership-audit
**Execution boundary:** Read-only diagnostics remain available. Every state-changing line below is a non-executing preview unless an immediately adjacent `SAFETY GATE` names the target, effect, scope, reversibility, and exact confirmation. U
Alternatives in Security
- Google Workspace Cloud Identity — Manage Cloud Identity groups and memberships 21.6k ★
- Engage.Exploit — Execute Phase 4 - Exploitation and Access Establishment 348 ★
- List All Global Skills Sorted By Provider Location — asm list --scope global --sort location asm search "code review" --json asm inspect my-skill asm audit --yes a 185 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Bulbi
Security-first sandbox for autonomous AI coding agents. Run Claude Code, Codex and other AI CLIs in full-auto
Tidy Context
Audit and prune CLAUDE.md / nested CLAUDE.md / project memory files — verify claims against the repo, remove s
Cleanup Docs
Audit and clean up a repo's Claude documentation — measure the always-on tier first (CLAUDE.md + nested + .cla
Pbi Rls
Delegate row-level security to pbi-security: design and create roles and DAX filter permissions (static, dynam
Aegis Run Logger
Stop hook that archives every Claude Code session transcript to .aegis/brain/runs/ for later replay. Use this
Bouncer
Independent quality gate that uses Gemini to audit Claude Code's output. Includes Stop hook (automatic), quick
Related Agents
Ad Computer Admin
Active Directory computer administration — look up computers, set whitelisted computer attributes (description
Git Committer
Analyzes git changes, groups them logically, and creates Conventional Commits for each group. Use proactively
Bibliography Introducer
Stage 5 worker — reads one bibliography's listing, its works with their descriptions, its groups, and its maps