Authorization and RBAC

A skill your agent uses whenever the user mentions Horizon by name in a Laravel context.

coollabsio/coolify

Creates and queries KubeSphere users, workspaces and projects and assigns built-in roles, defaulting to least privilege and never deleting anything.

kubesphere/kubesphere

Finds or validates a usable SageMaker execution role before deploying or training, so scripts do not try to create IAM roles they lack permission to create.

huggingface/skills

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

Cybereason-Public/owLSM

Prepare and, with a verified authenticated publishing route and authorization, publish daily conference-deadline countdown posts for @ccfddl on X/Twitter.

ccfddl/ccf-deadlines

A skill your agent uses when working with Payload projects (payload.config.ts, collections, fields, hooks, access control, Payload API).

payloadcms/payload

Runs a Strix white-box security review that reads the source, then exploits what it finds in a sandbox so each reported issue has a proof-of-concept.

usestrix/strix

Smoke test the Agent Builder feature branch end-to-end against a hermetic project scaffolded by the skill (linked to the current worktree).

mastra-ai/mastra

Sets up Convex auth, identity mapping, and access control. An agent skill from spokvulcan/poker-planning.

spokvulcan/poker-planning

Creates and checks Kubernetes manifests, Helm charts, RBAC and network policies, and helps debug pod problems, with kubectl checks and rollback steps.

Jeffallan/claude-skills

Author, package, and debug NextCoWork plugins — the single entry point.

AIDotNet/NextCoWork

ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side.

abpframework/abp

Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026).

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Checklist-driven security review for changes to authentication, authorization, MFA, secrets, input validation and other security-critical code.

ZeroDeng01/sublinkPro

Probes an AI agent through dialogue for cross-user data access, privilege escalation and login bypass, and reports confirmed findings as structured vulnerability entries.

Tencent/AI-Infra-Guard

Exhaustively audit the UI control by control and role by role — enumerate every button, link, and input on a set of pages, write down what each is supposed to do (derived from the handler code and…

bagofwords1/bagofwords

Diagnose a named CCB agent by combining authoritative runtime and job lineage with deep read-only pane inspection, apply bounded recovery when evidence supports it, verify the result, and request…

SeemSeam/claude_codex_bridge

AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills.

itsmostafa/aws-agent-skills

A skill your agent uses when running a previously designed distributed-systems test plan against a real or simulated cluster — driving fault injection, workload, chaos scenarios, linearizability /…

shenli/distributed-system-testing

Audit or harden gocron security across Go, pnpm workspaces, containers, authentication, authorization, secrets, command execution, SSRF, and dependency vulnerabilities.

gocronx-team/gocron

Django access control and IDOR security review. An agent skill from getsentry/skills.

getsentry/skills

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems.

ynulihao/AgentSkillOS

The agent's persistent long-term memory — the only knowledge that survives across sessions, shared across the fleet under access control.

caura-ai/caura

Manages Google Cloud Privileged Access Manager entitlements and grants: create and edit entitlements, request temporary access, and approve or deny pending grants.

google/skills

Create and update QuickStack Elysia REST API routes using the project's established /api/v1 route conventions.

biersoeckli/QuickStack

Creates and manages Link spend requests and retrieves approved one-time-use payment credentials.

stripe/link-cli

Framework-maintainer skill for the Tyro Laravel authorization package

hasinhayder/tyro

Implement identity and authorization boundaries in Rust on Nails applications.

bionic-gpt/bionic-gpt

Build and risk-screen a compact role-based method shortlist for a mathematical-modeling subquestion.

zhnnky329/MathModeling-skills

Handles Laravel Pulse setup, configuration, and custom card development.

MineTrax/minetrax

Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage.

soundcloud/api

API route implementation patterns with RLS, validation, and error handling. Use when creating API routes, implementing CRUD endpoints, adding…

bybren-llc/safe-agentic-workflow

Configure portal/policy JWT keys, token names and lifetimes, key loading and generation, public-key discovery, and System API encryption keys.

greenpau/caddy-security

Add a new permission end-to-end — server constant + endpoint gate, and (admin app) mirror it into the permissions catalog + route guard.

fullstackhero/dotnet-starter-kit

Prepare, publish, verify, or recover a cloakbrowser-mcp release only when the user explicitly requests release work.

swimmwatch/cloakbrowser-mcp

A skill your agent uses when designing data schemas, implementing sharing workflows, or auditing access control in Jazz applications.

garden-co/classic-jazz

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end.

microsoft/GitHub-Copilot-for-Azure

Design, audit, document, refactor, and implement NestJS CRUD Automator resources using @elsikora/nestjs-crud-automator.

ElsiKora/NestJS-Crud-Automator

Add or retrofit Tenuo authorization for AI-agent tools and effects.

tenuo-ai/tenuo

Guide for writing eval conversation JSONs and running them through policy engines

open-bias/open-bias

Specifies how a GenLayer Intelligent Contract decision about an agent's performance becomes an ERC-7710 revocation or policy change, through a relayer or bridge and an EVM controller.

internet-court/internet-court-skill

Sentry-specific security review based on real vulnerability history.

getsentry/sentry

How Kopiur writes and maintains user-facing docs — the MkDocs Material site under docs/ and the example manifests under deploy/examples/.

home-operations/kopiur

Decides whether a feature belongs in the application or in one of five shared Arandu modules before adding permissions, wallets, tags, Markdown rendering or API docs.

arandu-io/arandu

A skill your agent uses when customizing, branding, or replacing the built-in FrontMCP OAuth pages (the login, consent, federated-select, incremental-authorization, and error pages) with your own…

agentfront/frontmcp

Work on Supercheck authentication, RBAC, tenant isolation, sessions, API and trigger keys, invitations, project membership, project variables, OAuth, super-admin behavior, SSRF, or…

supercheck-io/supercheck

A skill your agent uses when designing a test plan for a distributed or stateful system — anything with persistence, replication, consensus, retries, idempotency, async messaging, multi-tenancy, or…

shenli/distributed-system-testing

bkend.ai authentication — email/social login, JWT tokens, RBAC, session management.

ww-w-ai/bkit-claude-code