Promote rbac from Snowflake-Solutions

[jdanielmyers]

Summary

Promotes the rbac skill from the internal Snowflake-Solutions/cortex-code-skills repo to public Labs, rewritten for an external builder audience (developers, data engineers).

Run through the v1.1.0 audit pipeline:

• Holistic LLM rewrite for builder audience
• All internal Snowflake references substituted with public equivalents (e.g., Snowhouse -> ACCOUNT_USAGE)
• audience.no_internal_refs check passes

Test plan

• Audit blocking_failures == 0
• audience.no_internal_refs passes
• Frontmatter matches Labs conventions (snowflake-docs / manage-zerocopy-sapbdc precedents)
• LICENSE present (Snowflake)
• No Snowflake-Solutions repo path leakage

[jdanielmyers]

Audit Report: rbac

Re-audit (post-v1.1.1 + critical fixes). Original report superseded.

Summary

Category	🔴	🟡	🟢
Frontmatter	0	0	0
Structure	0	0	0
Workflow	0	0	1

Critical 🔴

None — all critical findings from the original audit have been addressed.

Warnings 🟡

None.

Suggestions 🟢

1. This is a textbook router skill: thin (~120 lines), clear delegation table with 10 sub-flows, explicit "When NOT to Use" with delegation targets, and a stopping point after layer selection before loading any sub-flow. The "general rule across all sub-flows" stopping point for CREATE ROLE/GRANT/REVOKE is well-placed.

Verdict

Ready to merge — Clean router structure, proper delegation boundaries, comprehensive stopping points at both router and sub-flow levels.