Authorization and RBAC

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based…

giuseppe-trisciuoglio/developer-kit

Clerk Organizations for B2B and multi-tenant apps - org switching, roles and permissions, verified domains, and enterprise SSO.

growupanand/ConvoForm

Documents the OmniRoute REST endpoints for creating, listing, updating, regenerating and deleting API keys, with per-key scopes, spending limits, expiry and device lists.

diegosouzapw/OmniRoute

A skill your agent uses when building a feature on reusable database storage or UI, such as CRM, or deciding whether it needs a Macro database entity.

macro-inc/macro

Curated collection of high-quality prompts for various use cases.

davila7/claude-code-templates

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, RBAC drift, and client telemetry privacy.

langfuse/langfuse

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments.

timothywarner-org/claude-code

Database migration creation with mandatory RLS policies and ARCHitect approval workflow. Use when creating migrations, adding tables with RLS…

bybren-llc/safe-agentic-workflow

Interactive WhatsApp channel onboarding — guides through device linking, phone number config, and access control setup

Rich627/whatsapp-claude-plugin

Access control design patterns for Solidity protocols. An agent skill from ccashwell/evm-cortex.

ccashwell/evm-cortex

Set up Convex authentication with proper user management, identity mapping, and access control patterns.

waynesutton/markdown-site

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

Guides work on truST's HMI - the HMI Builder editor, page files, the runtime display at /hmi, bindings, commands and writes, authorization, alarms and trends, the plant library and the HMI tests.

johannesPettersson80/trust-platform

CORS misconfiguration testing for data theft and access control bypass

NeoTheCapt/RedteamAgent

Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules…

redis/agent-skills

A skill your agent uses when implementing authorization and access control for FrontMCP tools, resources, prompts, or skills, deciding who may invoke what.

agentfront/frontmcp

Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin.

ever-works/ever-works

Authentication and authorization patterns including OAuth2, JWT, RBAC, session management, and PKCE flows

rohitg00/awesome-claude-code-toolkit

Reference guidance for Azure Advisor work: recommendations, alerts and digests, workbooks, RBAC access and sovereign-cloud limits, fetched from Microsoft Learn.

MicrosoftDocs/Agent-Skills

Create or migrate a protected Sim resource operation in the shared Principal and application-use-case architecture across internal APIs, public or versioned APIs, Copilot, and other trusted tool…

simstudioai/sim

Creates and manages tokenized Solana vaults with the GLAM CLI and TypeScript SDK, including Jupiter swaps, Kamino lending, staking, access control and investor subscriptions.

internet-court/internet-court-skill

Guides designing a layered permission pipeline for agent tools that decides which calls are allowed, need confirmation or are denied, with scopes and hooks.

simbajigege/book2skills

Complete module inventory of the Auth API project with file paths, dependencies, and architecture overview.

gjovanovicst/golang-auth-api

Manage PostgreSQL migrations, typed SQL queries, generated Rust bindings, and database authorization in Rust on Nails applications.

bionic-gpt/bionic-gpt

Reviews a diff, module or network surface for exploitable defects, mapping trust boundaries and sinks, then reports only findings with a verified reachable path and a fix.

codewhale-hq/Codewhale

Add or change a REST API resource in agent-manager-service (the Go control plane).

wso2/agent-manager

Configure portal cookie names, prefixes, domains, paths, attributes, and refresh overrides.

greenpau/caddy-security

Review Convex security audit patterns for authentication and authorization.

IgorWarzocha/Opencode-Workflows

Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues.

zebbern/claude-code-guide

A skill your agent uses when the diff adds or changes an endpoint, resolver, RPC, job or query that takes an object id, a role check, a request binding or a tenant filter - BOLA/IDOR, function-level…

makifbaysal/tasktrooper

A skill your agent uses when implementing authentication (login, token issuance) or authorization (access control, permissions).

aiming-lab/MetaClaw

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

affaan-m/ECC

Manage Grafana Cloud accounts — organizations, stacks, RBAC roles and assignments, SSO/SAML/OAuth/GitHub auth, service accounts for CI/CD, user invites, team membership, and API-driven provisioning.

grafana/skills

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

davila7/claude-code-templates

Connects messaging channels to NanoClaw agent groups, sets isolation and engagement defaults, and reports which channels are wired, unwired or not configured.

nanocoai/nanoclaw

Automatically discover API design skills when working with REST APIs, GraphQL schemas, API authentication, OAuth, JWT, rate limiting, API versioning, error handling, or endpoint design.

rand/cc-polymath

Implement a new or changed Supercheck feature end to end across schema, auth/RBAC, services, routes/actions, UI, queues/workers, CLI/recorder, tests, docs, and deployment contracts.

supercheck-io/supercheck

Analyzes Solidity contract entry points to map attack surface.

alt-research2/SolidityGuard

Azure Resource Manager SDK for Cosmos DB in .NET. An agent skill from microsoft/skills.

microsoft/skills

AWS Identity and Access Management for users, roles, policies, and permissions.

itsmostafa/aws-agent-skills

Prepare, deduplicate, create, triage, update, close, or safely retry NiceEval GitHub Issues from public sanitized observations.

NiceEval/NiceEval

Complete HTTP route structure with auth layers, middleware chains, rate limiting, and handler mappings for all API and GUI endpoints.

gjovanovicst/golang-auth-api

Explains authorization in an Arandu Go application: write a Policy, get a security.Grant through security.Authorize, re-authorize each row, and keep tenant isolation.

arandu-io/arandu

Implement Axum loaders and actions using Rust on Nails typed routing, authorization, validation, HTML rendering, and persistence boundaries.

bionic-gpt/bionic-gpt

Diagnose and fix OCI AI Quick Actions (AQUA) issues including deployment failures, OOM errors, authorization problems, capacity issues, container errors, and policy misconfigurations.

oracle/accelerated-data-science

A skill your agent uses when the user asks for a WorkOS docs URL, term, or dashboard field (Sign-in endpoint, initiateloginuri, Redirect URI, WORKOS env vars), or is implementing, debugging, or…

usenotra/notra

A skill your agent uses when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

jellydn/my-ai-tools