Update to Authorised OSINT Toolkit

{
  "name": "identity-security-review",
  "description": "Review user-supplied identity architecture, federation design and control documentation for defensive security gaps. Use for assurance and remediation planning; not for tenant discovery, account enumeration, login testing or credential activity.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 264
    }
  ],
  "skill_md_contents": "---\nname: identity-security-review\ndescription: \"Review user-supplied identity architecture, federation design and control documentation for defensive security gaps. Use for assurance and remediation planning; not for tenant discovery, account enumeration, login testing or credential activity.\"\n---\n\n# Identity security review\n\nReview identity architecture from documentation and sanitised configuration summaries.\n\n## Boundaries\n\n- Do not discover tenants, enumerate users, generate login candidates, test authentication or request credentials.\n- Do not infer a person's account status, employment or privileges from public information.\n- Keep recommendations provider-neutral unless the user supplies the relevant platform context.\n\n## Method\n\n1. Map documented identity providers, federation boundaries, trust relationships, privileged roles and recovery paths.\n2. Review MFA strength, conditional access, session controls, legacy authentication, service identities, joiner-mover-leaver controls and emergency access.\n3. Identify trust concentrations, weak ownership, monitoring gaps and controls that depend on undocumented assumptions.\n4. Distinguish design evidence from implemented-control evidence and operational-effectiveness evidence.\n5. Recommend owner-performed verification using approved administrative logs and configuration exports.\n6. Produce an assurance table with control objective, supplied evidence, gap, risk, confidence and remediation.\n"
}