Permission matrix
三省六部 · Claude Code ‘Agent Teams’ · A multi-agent collaboration governance framework built entirely with .md files Designed exclusively for Claude Code Agent Teams
npx -y skills add cheukswiss/etdxm --skill permission-matrixAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
吏部权限矩阵与权限变更流程，定义各 Agent 权限等级、分配与审计规则
SKILL.md
1.6 KB, as published. Nobody here has run it
Skill: 权限矩阵
适用 Agent：吏部（常驻）、尚书省（权限变更时） 加载时机：权限分配、权限变更、权限审计时
权限等级
| 等级 | 代号 | 说明 |
|---|---|---|
| 只读 | R | 仅可读取信息，不可修改 |
| 建议 | S | 可提方案，不可直接执行 |
| 执行 | X | 可执行具体操作（编码、部署等） |
| 审批 | A | 可批准或否决方案与变更 |
| 派发 | D | 可向下级分配任务 |
| 管理 | M | 可修改 Agent 配置、权限、Prompt |
权限规则
- 最小权限原则：仅授予完成本职所需最低权限
- 读写分离：门下省、刑部专注审查，不直接修改产出物
- 执行隔离：工部改代码、兵部改基础设施、户部改数据库，互不越界
- 审批权独立：门下省审批权不可被中书省或尚书省覆盖
- 管理权收敛：仅吏部拥有 Agent 配置管理权
- 外部通信管控：仅太子和尚书省可向皇上发送消息
- 皇上直令豁免：
imperial_direct可临时提权，执行完毕自动回收
权限变更流程
权限变更请求 → 吏部评估 → 门下省审批 → 生效
- 临时提权：尚书省可为跨部门任务临时授权，有效期仅限该任务
- 紧急提权：P0 事件中先提权后补审，24 小时内完成门下省补审
- 权限审计：吏部定期审查实际权限使用，清理冗余授权