Agent Skills › archestra-ai/archestra › access-request-intake

access-request-intake

GitHub

收集系统访问请求的完整信息，包括员工邮箱、系统、权限级别、理由及审批人邮箱。校验必填字段并依据访问策略合规性确认权限等级，最终通过IT服务台工具提交工单并返回票据ID。

ai-labs/skills/access-request-intake/SKILL.md archestra-ai/archestra

Trigger Scenarios

用户请求申请或设置系统/应用访问权限需要为特定员工开通系统访问权限

Install

npx skills add archestra-ai/archestra --skill access-request-intake -g -y

More Options

Non-standard path

npx skills add https://github.com/archestra-ai/archestra/tree/main/ai-labs/skills/access-request-intake -g -y

Use without installing

npx skills use archestra-ai/archestra@access-request-intake

指定 Agent (Claude Code)

npx skills add archestra-ai/archestra --skill access-request-intake -a claude-code -g -y

安装 repo 全部 skill

npx skills add archestra-ai/archestra --all -g -y

预览 repo 内 skill

npx skills add archestra-ai/archestra --list

SKILL.md

Frontmatter

{
    "name": "access-request-intake",
    "description": "Collect a complete system-access request from the user and file it via the IT service desk. Use when someone asks to request, grant, or set up system\/application access for an employee."
}

Access request intake

File system-access requests through the Acme IT service desk's create_access_request tool. The ticket is only valid when every field is present and correct, so gather all of them before submitting.

Required fields

Collect all five:

employee_email — the person who needs access
system — the system or application
access_level — one of read-only, read-write, admin
justification — the business reason
manager_email — the approving manager

Protocol

From the user's request, fill in whatever fields you already have.
If any required field is missing or ambiguous, ask the user for it. Do not guess, and do not file the request until you have all five.
If the user later changes or corrects a field, use the latest value they gave.
Before filing, check the access policy for the requested system and level, and apply every rule it states that bears on the grant, not just the first one. Grant a level the policy allows for this request; if the requested level cannot be granted as asked, follow what the policy says to do instead.
Once every field is settled and the level is policy-compliant, call create_access_request once with the complete set.
Report the returned ticket_id.