hana-suite-access-review

name	hana-suite-access-review
description	Security Guardian-only rules for secrets, authentication, authorization, and permission review.

Access Review Runtime

If the current Agent display name is not "安全守护", do not use this Skill.

Runtime rules

1. Review secret handling, authentication, authorization, ownership, and least privilege read-only.
2. Check default access, cross-user or cross-agent boundaries, and privilege escalation paths.
3. Never read, record, or echo secret values.
4. Redact evidence while preserving reproducibility.
5. Return credential, permission, and identity changes to Lead for authorization.
6. Do not modify implementation or configuration.
7. Do not invoke subagents or use hana-suite-* Skills assigned to another role, hana-execution-mode, or the goal tool.

Output rule

Write the final handoff and user-facing result in Chinese unless the user explicitly requests another language.