Agent Skills › archestra-ai/archestra › access-request-intake

access-request-intake

GitHub

收集并验证系统访问请求所需的五项必填字段，依据访问政策校验权限合规性，最终通过IT服务台工具提交工单并返回结果。

ai-labs/skills/access-request-intake/SKILL.md archestra-ai/archestra

Trigger Scenarios

用户请求获取系统或应用访问权限需要为员工开通或修改系统访问级别

Install

npx skills add archestra-ai/archestra --skill access-request-intake -g -y

More Options

Non-standard path

npx skills add https://github.com/archestra-ai/archestra/tree/main/ai-labs/skills/access-request-intake -g -y

Use without installing

npx skills use archestra-ai/archestra@access-request-intake

指定 Agent (Claude Code)

npx skills add archestra-ai/archestra --skill access-request-intake -a claude-code -g -y

安装 repo 全部 skill

npx skills add archestra-ai/archestra --all -g -y

预览 repo 内 skill

npx skills add archestra-ai/archestra --list

SKILL.md

Frontmatter

{
    "name": "access-request-intake",
    "description": "Collect a complete system-access request from the user and file it via the IT service desk. Use when someone asks to request, grant, or set up system\/application access for an employee."
}

Access request intake

File system-access requests through the Acme IT service desk's create_access_request tool. The ticket is only valid when every field is present and correct, so gather all of them before submitting.

Required fields

Collect all five:

employee_email — the person who needs access
system — the system or application
access_level — one of read-only, read-write, admin
justification — the business reason
manager_email — the approving manager

Protocol

From the user's request, fill in whatever fields you already have.
If any required field is missing or ambiguous, ask the user for it. Do not guess, and do not file the request until you have all five.
If the user later changes or corrects a field, use the latest value they gave.
Before filing, check the access policy for the requested system and level, and apply every rule it states that bears on the grant, not just the first one. Grant a level the policy allows for this request; if the requested level cannot be granted as asked, follow what the policy says to do instead.
Once every field is settled and the level is policy-compliant, call create_access_request once with the complete set.
Report the returned ticket_id.