Authorization and RBAC

Manage contacts, communication channels, access control, and invite links

vellum-ai/vellum-assistant

Configures AWS Resilience Hub v2 for multi-account resilience management across an AWS Organization.

aws/agent-toolkit-for-aws

Privilege system reference for the HMIS project. An agent skill from hmislk/hmis.

hmislk/hmis

Audit access control implementations for security vulnerabilities and misconfigurations.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when implementing the Frappe/ERPNext permission system.

Impertio-Studio/Frappe_Claude_Skill_Package

A skill your agent uses when creating or customizing Workspace pages in Frappe v14-v16.

Impertio-Studio/Frappe_Claude_Skill_Package

A skill your agent uses when reviewing a Solidity, Vyper, or Rust (Solana/Anchor) smart contract for paid audit work or pre-launch sanity check.

elophanto/EloPhanto

A skill your agent uses when users get, create, edit, delete, or retrieve Salesforce Sharing Rules metadata for record-level access.

forcedotcom/sf-skills

Authorized testing of access-control and business-logic flaws that pattern scanners cannot find — IDOR/BOLA, broken function-level authorization, mass assignment, business-logic abuse, and race…

ptn1411/skill

Run all audit checks (RBAC, hooks, design system, tests) and verify build

trycompai/comp

Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption.

TheBeardedBearSAS/claude-craft

ANALYSIS SKILL — Find the right Azure RBAC role for an identity with least-privilege access; generate CLI, Bicep, and Terraform code to assign it.

jonathan-vella/apex

Programmatic security management in Neo4j — RBAC/ABAC, user lifecycle (CREATE/ALTER/DROP USER), role lifecycle (CREATE/GRANT ROLE/DROP ROLE), privilege grants and denies (GRANT/DENY/REVOKE on graph…

neo4j-contrib/neo4j-skills

Guidance for Azure Policy — enforcing and auditing governance and security guardrails at scale across Azure with definitions, initiatives, assignments, and remediation tasks.

vinayaklatthe/microsoft-security-skills

Pilot a Databricks Hive Metastore (HMS) → Unity Catalog (UC) migration before the deadline — audit every table's migratability, produce a dependency-ordered migration plan, trace UC's two-level…

jeremylongshore/tons-of-skills-marketplace

Audit Snowflake effective access and produce a safe least-privilege change packet.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated /…

jabrena/plinth

A skill your agent uses when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules…

jabrena/plinth

Version-aware guide for configuring and running Apollo Router for federated GraphQL supergraphs.

apollographql/skills

Expert knowledge for Azure Artifact Signing development including decision making, security, configuration, and integrations & coding patterns.

MicrosoftDocs/Agent-Skills

OAuth 2.1 + JWT authentication security best practices. An agent skill from majiayu000/spellbook.

majiayu000/spellbook

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation.

majiayu000/spellbook

Provides Bicep coding standards for Azure infrastructure in this repository.

microsoft-foundry/foundry-agent-webapp

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

jonathan-vella/apex

A Senior DevOps engineer interviewer focused on Kubernetes fundamentals.

PrepLabsAI/InterviewMentor

Concepts, external interfaces, and conventions for Speakeasy's role-based access control (RBAC) subsystem — scopes, grants, principals, system roles, and the authz.Engine.Require enforcement path…

speakeasy-api/gram

The Contracts & Security review perspective for PostHog Review.

PostHog/posthog

A skill your agent uses when the user asks "who has access", "audit permissions", "check user roles", "list API keys", "review access controls", "rotate API keys", "create API key", "delete expired…

coralogix/cx-cli

A skill your agent uses when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies.

aws/agent-toolkit-for-aws

A skill your agent uses to configure or inspect Salesforce Data Cloud DataSpace access for permission sets.

forcedotcom/sf-skills

Operate Notion workspace content through Notion MCP using the UXC CLI, including search, fetch, users/teams lookup, page/database creation and updates, and comments.

holon-run/uxc

Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall…

microsoft/power-platform-skills

Unity Catalog governance, access control, and observability.

databricks/databricks-agent-skills

Set up the local development environment for APIView Copilot.

Azure/azure-sdk-tools

Design, build, and optimize dashboards for RIA practice management with AUM tracking, revenue analytics, and KPI frameworks.

JoelLewis/finance_skills

Guide the design and management of trading venue connectivity and market data infrastructure.

JoelLewis/finance_skills

Operate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using doca-urom: pull the NGC image, choose the UCX…

NVIDIA/skills

Guidance for Azure Key Vault — securely storing and managing secrets, keys, and certificates with RBAC, network isolation, managed identity access, soft delete / purge protection, and rotation.

Kilo-Org/kilo-marketplace

Validates cyber exercise authorization, scope, exclusions, runtime controls, expiry, stop and restart gates.

HoangNguyen0403/agent-skills-standard

Generate professional prior authorization request letters for insurance companies with proper clinical justification and formatting.

aipoch/medical-research-skills

Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS Managed Rules tuned in Count mode…

aws/agent-toolkit-for-aws

Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or feature; making security-relevant design decisions (auth, crypto, trust boundaries…

telagod/code-abyss

A skill your agent uses when authoring PolicyRuleDefinition and PolicyRuleDefinitionSet metadata XML for Salesforce Data Cloud governance policies, or when editing .policyRuleDefinition /…

forcedotcom/sf-skills

A skill your agent uses when writing code that processes user input, manages authentication or authorization, constructs database queries, handles file operations, interacts with external data…

NoobyGains/godmode

Review owned source, configuration and dependency metadata for supported security findings with precise evidence and remediation.

WrongStack/WrongStack

Implement application sign-in, sessions and identity integration with explicit account/tenant authorization.

WrongStack/WrongStack

Guidance for selecting the right Azure RBAC role with least privilege - mapping required actions to built-in roles, deciding when a custom role is needed, scoping assignments correctly, and choosing…

vinayaklatthe/microsoft-security-skills

Set up Convex authentication with proper user management, identity mapping, and access control patterns.

vvedantb/eva