Authorization and RBAC

Create or delegate Tenuo warrants from natural-language authority requirements.

tenuo-ai/tenuo

Claims-based authorization for agents and operations. An agent skill from ruvnet/ruflo.

ruvnet/ruflo

Authentication and authorization for ASP.NET Core. An agent skill from codewithmukesh/dotnet-claude-kit.

codewithmukesh/dotnet-claude-kit

This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references,"…

zebbern/claude-code-guide

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023).

briiirussell/cybersecurity-skills

Implements authentication using Rails 8 built-in generator. An agent skill from ThibautBaissac/rails_ai_agents.

ThibautBaissac/rails_ai_agents

Stops an AsyncRedux (Flutter) action from dispatching. An agent skill from marcglasberg/async_redux.

marcglasberg/async_redux

LiteLLM-RS Authentication Architecture. An agent skill from majiayu000/litellm-rs.

majiayu000/litellm-rs

Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security.

aspectrr/deer

A skill your agent uses when the user asks to query Shadmin admin platform resources (users, roles, menus, registered API resources) from a terminal — for example "list shadmin users", "show shadmin…

ahaodev/shadmin

Guide for creating a new policy engine under openbias/policy/engines/

open-bias/open-bias

Enforce hexagonal architecture in the Rust backend. An agent skill from macro-inc/macro.

macro-inc/macro

A skill your agent uses when working on Gryph's AARM security layer or policy engine.

safedep/gryph

Expert guide for Backend.AI distributed computing platform. An agent skill from lablup/backend.ai-webui.

lablup/backend.ai-webui

Manages who can reach Claude through a Discord channel: approve pairing codes, edit the allowlist and set direct-message and group policy.

anthropics/claude-plugins-official

Saves a Telegram bot token for the Telegram channel plugin and reviews who may message the bot, steering the policy toward a fixed allowlist.

anthropics/claude-plugins-official

Create, update, prepare, or review a cloakbrowser-mcp GitHub Pull Request only when the user explicitly requests PR work.

swimmwatch/cloakbrowser-mcp

Decides whether a feature belongs in the application or in one of five shared Arandu modules before adding permissions, wallets, tags, Markdown rendering or API docs.

arandu-io/arandu

Implements age-gating mechanisms for online services to restrict access based on user age.

mukul975/Privacy-Data-Protection-Skills

Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without…

maddhruv/absolute

Research backlink opportunities, record contact evidence, and generate personalized local outreach drafts from user-provided product and contact data.

kennyzir/7deer_skills

This skill should be used when the user asks to "audit Laravel permissions", "review roles and permissions", "check authorization code", "find permission issues", "permissions review", "audit access…

LaravelDaily/AI-Workflows-For-Laravel

Kibana API route authorization patterns. An agent skill from elastic/kibana.

elastic/kibana

SOP for building multi-agent systems with CrewAI — role-based collaboration, sequential/hierarchical processes, Flows, memory, delegation.

agentsope/SkillAlchemy

Worked bug bounty case study of a yield aggregator: target scoring, fund-flow mapping, prior audit triage and a verdict per bug class, with role misconfiguration in focus.

tradecatlabs/vibe-coding-cn

Audit, explain, or compare existing Tenuo warrants and delegation chains.

tenuo-ai/tenuo

Detailed documentation of the 4 authentication systems, token lifecycle, middleware pipeline, session management, and RBAC authorization.

gjovanovicst/golang-auth-api

Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses

NeoTheCapt/RedteamAgent

Reference for SubductionPolicy (the four hooks authorizeConnect, authorizeFetch, authorizePut, filterAuthorizedFetch passed via Subduction.hydrate(..., policy) or new Repo({ subductionPolicy })).

dxos/dxos

A skill your agent uses when working with cognee's users, permissions, and multi-tenancy — creating users, tenants and roles, sharing datasets (read/write/delete/share grants), acting as a specific…

topoteretes/cognee

Comprehensive SAP ABAP CDS (Core Data Services) reference for data modeling, view development, and semantic enrichment.

secondsky/sap-skills

Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and paired Apple Watch system UI.

dpearson2699/swift-ios-skills

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3…

utkusen/sast-skills

Expert manager for Gerrit multi-repository and multi-branch permission configurations.

theneoai/awesome-skills

Clerk Organizations for B2B and multi-tenant apps - org switching, roles and permissions, verified domains, and enterprise SSO.

growupanand/ConvoForm

Manage WeChat access control (pairing codes and allowlist). An agent skill from qufei1993/cc-weixin.

qufei1993/cc-weixin

使用 NcatBot 框架开发 QQ 机器人或跨平台 Bot。当用户需要快速体验、创建插件、注册事件处理、发送消息、调用 Bot API、使用 Mixin/Hook、使用 CLI 工具、编写插件测试、或调试运行问题时触发此技能。Use when: 开发…

ncatbot/NcatBot

Diagnose a denied Tenuo call and make the legitimate call work with the smallest change to authority.

tenuo-ai/tenuo

Add a copy-ready admin UI building block to a dashboard built on the scaffold-dashboard base — forms (form, wizard, combobox, file upload, inline edit), lists & tables (CRUD list, card grid…

ahpxex/open-dashboard

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

affaan-m/ECC

Designs and audits who can reach what — authentication, authorization models, privileged access, service credentials, and joiner-mover-leaver process.

cbrock84/headcount

Run Warden security scans in this repo using Sentry's warden-skills.

UsefulSoftwareCo/executor

Analyzes authentication and authorization events for failed-login clustering, privilege-escalation chains, credential-stuffing patterns, and MFA-bypass indicators.

ahmadvh/octochains

Guidance for building and debugging Phoenix web interfaces: where LiveView loads data, scopes, PubSub topics, external polling and component state.

georgeguimaraes/elixir-agent-tools

Enforces Circuit Breaker security hardening conventions across backend, frontend, Docker, and nginx.

BlkLeg/CircuitBreaker

Run full pre-commit validation (fmt, lint, test, security) and report results

openfga/go-sdk

Creates new API endpoints, and converts older ones, with the defineRoute() pattern used in cod-server, including auth strategies, scopes and OpenAPI output.

bighadj22/codflow

Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…

vinayaklatthe/microsoft-security-skills