Authorization and RBAC

Apply Lokalise security best practices for API tokens and access control.

jeremylongshore/tons-of-skills-marketplace

Author MCP tool-call policy rules without hand-editing access.json.

jeremylongshore/tons-of-skills-marketplace

Retell AI enterprise rbac — AI voice agent and phone call automation.

jeremylongshore/tons-of-skills-marketplace

Review and govern Salesforce enterprise access across profiles, permission sets and groups, sharing, field access, OAuth apps, SSO, and privileged roles.

jeremylongshore/tons-of-skills-marketplace

Build IAM from scratch — roles, policies, service accounts with least privilege.

jeremylongshore/tons-of-skills-marketplace

Implement Convex authentication and authorization patterns with OIDC providers or Convex Auth.

IgorWarzocha/Opencode-Workflows

Inspect and change navigation profiles in MDL — home pages, menus, login and not-found pages, and role-based routing.

mendixlabs/mxcli

Cisco ISE posture and policy audit - authorization rules, posture compliance, profiling gaps, TrustSec SGT matrix, active session health.

automateyournetwork/netclaw

Security best practices for Micronaut/Kotlin backend including authentication, authorization, input validation, and OWASP prevention.

c0x12c/ai-toolkit

Internal commit helper for public workflows that already hold explicit commit authorization; creates scoped, value-communicating commits without owning push or PR landing.

leo-kuang-ai/spec-first

Internal landing helper for public workflows that already hold explicit commit and landing authorization; commits scoped changes, pushes, and creates or updates a PR with a value-first description.

leo-kuang-ai/spec-first

A skill your agent uses when building or reviewing Uniswap V4 hooks, custom AMM logic, dynamic fees, access controls, oracle hooks, return deltas, hook deployment, or hook-specific tests.

ccashwell/evm-cortex

Audit container runtime isolation across namespaces, capabilities, seccomp, mandatory access control, mounts, devices, daemon sockets, cgroups, identity, and host integration.

cyberful/cyberful

Identity and access management: RBAC, least privilege, MFA, quarterly reviews per ISO 27001 A.5.15, A.8.2, A.8.3

Hack23/cia

Write a persuasive prior-authorization / medical-necessity letter to an insurer.

mohitagw15856/pm-claude-skills

Review a design, PR, or feature for security issues before it ships.

mohitagw15856/pm-claude-skills

Dual-platform Cisco ASA and Firepower Threat Defense (FTD) firewall audit with ACL analysis, NAT policy validation, Modular Policy Framework / Access Control Policy evaluation, Snort IPS assessment…

LeoYeAI/openclaw-master-skills

Istio Service Mesh 安全策略绕过。当目标 K8s 集群使用 Istio、请求被 AuthorizationPolicy 拒绝（403 RBAC denied）、或发现 Envoy sidecar 时使用。核心手法：UID 1337 绕过 Envoy。任何在 K8s 中遇到 Istio 策略阻拦、Service Mesh 限制、或 Envoy 相关安全控制的场景都应使用此技能

wgpsec/AboutSecurity

Build or modify backend APIs, services, jobs, persistence, and integrations while preserving contracts, authorization, data integrity, and failure behavior.

hashgraph-online/awesome-codex-plugins

JWT, OAuth2, SAML, session management, RBAC, ABAC, and MFA implementation

cosmicstack-labs/mercury-agent-skills

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework.

Microck/ordinary-claude-skills

A skill your agent uses for page-deliver application code generation, page creation, publishing, deployment, going live, MCP enablement, or runtime access/control of deployed HRClaw applications.

infometa/workbuddyskills

Comprehensive OWASP-aligned security guidance across six standards - Top 10 (2021) for web apps, ASVS 5.0, MASVS v2.1.0 for mobile, API Security Top 10 (2023), Kubernetes Top 10 (2022), and the…

davila7/claude-code-templates

Manage Harness RBAC roles, role assignments, permissions, and resource groups via MCP v2 tools.

harness/harness-skills

Author, test, and deploy Tailscale-compatible huJSON policy files for Headscale tailnets — ACLs, Grants, Tags, Auto Approvers, Tailscale SSH rules.

magnus919/agent-skills

A skill your agent uses when implementing JWT authentication in FastAPI or Python projects.

aiskillstore/marketplace

A skill your agent uses when implementing authentication (JWT, sessions, OAuth), authorization (RBAC, ABAC), password hashing, MFA, or security best practices for backend services.

MadAppGang/claude-code

A skill your agent uses when orchestrating multi-agent code analysis with claudemem.

MadAppGang/claude-code

CORS (Cross-Origin Resource Sharing) misconfiguration auditor.

LeoYeAI/openclaw-master-skills

PHP 框架特定安全审计。当在 PHP 白盒审计中已识别目标使用特定框架、 需要检查框架特有安全机制和常见配置缺陷时触发。

wgpsec/AboutSecurity

Insecure direct object reference testing for broken access control

NeoTheCapt/RedteamAgent

Design a real harness for an agentic system using Claude Code-inspired patterns.

hashgraph-online/awesome-codex-plugins

Install and use GrayMatter as an OpenClaw skill that provides primary durable memory, shared object-graph state, and authenticated access to the live api-docs schema via api-0.

hashgraph-online/awesome-codex-plugins

Review application and infrastructure changes for exploitable security risks by tracing assets, trust boundaries, attacker-controlled input, authorization, sensitive data, and dangerous sinks.

hashgraph-online/awesome-codex-plugins

当出现注册/登录/找回密码/验证码/绑定手机/实名认证/OAuth/SSO/2FA/JWT等认证功能，前后端分离应用出现路由守卫/前端鉴权绕过，或发现ID可替换、角色参数可控、租户ID可控、接口存在越权迹象时调用。负责认证绕过、前端鉴权绕过、会话安全、验证码安全、水平/垂直越权、多租户隔离、密码重置、加密与随机性弱点分析。

zhaji2333/CkSKILLS

Build secure, reusable data access patterns with DTOs, taint checks, and colocated authorization in Next.js.

HoangNguyen0403/agent-skills-standard

UiPath Admin via uip admin — Identity Server (users, groups, robot accounts, external OAuth2 apps, secrets, PATs, SMTP), Authorization (custom roles, role assignments, permission catalog…

UiPath/skills

Guidance for Microsoft Entra Conditional Access (CA) and multifactor authentication — the Zero Trust policy engine that enforces grant/block decisions based on user, device, location, app, and risk…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender for Endpoint (MDE) — enterprise endpoint security with next-gen AV, EDR, attack surface reduction (ASR), Defender Vulnerability Management, automated investigation…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Defender XDR — the unified extended detection and response suite that correlates signals across endpoints, identities, email, and cloud apps into prioritised incidents with…

vinayaklatthe/microsoft-security-skills

Guidance for Microsoft Entra Permissions Management (CIEM) — discovers, right-sizes, and monitors permissions across Microsoft Azure, AWS, and Google Cloud.

vinayaklatthe/microsoft-security-skills

Guidance for the Microsoft unified security operations platform that brings Microsoft Sentinel, Microsoft Defender XDR, Security Copilot, Threat Intelligence, and Microsoft Security Exposure…

vinayaklatthe/microsoft-security-skills

Manages privacy compliance for employee background checks including criminal record processing under Art.

mukul975/Privacy-Data-Protection-Skills

Governs biometric data processing for employee timekeeping and access control under Art.

mukul975/Privacy-Data-Protection-Skills

Implements HIPAA Security Rule technical safeguards under 45 CFR §164.312 for electronic protected health information.

mukul975/Privacy-Data-Protection-Skills

GDPR Article 28(2) sub-processor approval workflow management.

mukul975/Privacy-Data-Protection-Skills

Explains the standardized API organization pattern for this codebase.

aiskillstore/marketplace

Authentication and access control skill for Next.js 15 + Supabase applications.

aiskillstore/marketplace