There is no easy way to do this, the security is created from a combination of AD Users, AD Groups and SP Groups so you would need to use a combination of Query LDAP (to check who is a member of which AD groups) and then the Call Web Services action to check the membership of SP Groups.