Agent skill

Claims

Claims-based authorization for agents and operations. An agent skill from ruvnet/ruflo.

Install Claims

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install ruvnet/ruflo claims --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/claims .claude/skills/claims && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .claude/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install ruvnet/ruflo claims --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/claims .agents/skills/claims && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .agents/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install ruvnet/ruflo claims --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/claims .cursor/skills/claims && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .cursor/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/ruvnet/ruflo.git --path .agents/skills/claims

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install ruvnet/ruflo claims --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/claims .gemini/skills/claims && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .gemini/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install ruvnet/ruflo claims

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/claims .github/skills/claims && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .github/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add ruvnet/ruflo --skill claims -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install ruvnet/ruflo claims --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/ruvnet/ruflo.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/claims .opencode/skills/claims && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "claims" agent skill from https://github.com/ruvnet/ruflo/tree/main/.agents/skills/claims into .opencode/skills/claims/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "claims", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: claims
GitHub stars: 74k
Used in: 2 other repos
Token cost: ~1.1k tokens
SKILL.md length: 406 words
Files: 1
Skills in repo: 264
Repo updated: Oct 9, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Claims-based authorization for agents and operations. An agent skill from ruvnet/ruflo.

Works in 4 steps: Follow principle of least privilege → Scope claims to specific resources → Audit claim usage regularly → …
: permission management
SKILL.md covers Purpose, Claim Types, Commands and Scope Patterns, plus 3 more sections
Calls npx

What it does

Claims is an agent skill from ruvnet/ruflo. Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.

Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering Authorization and RBAC. The repository describes itself as: 🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory…. The licence is MIT.

When your agent uses it

: permission management
Secure operations
Authorization checks

Example prompts

“/claims”

Requirements

Node.js

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

Follow principle of least privilege
Scope claims to specific resources
Audit claim usage regularly
Revoke claims when no longer needed

What it can do on your machine

Read from SKILL.md and the folder at commit 58e0ae7. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
- npx
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use npx, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Claims loads about 1.1k tokens when it runs. Until then it costs about 75 tokens; SKILL.md has 406 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~75
When it runs · the whole SKILL.md, loaded when a task matches: ~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from ruvnet/ruflo at commit 58e0ae7, republished under its MIT licence (© ruvnet). 406 words, ~1,070 tokens.

Download SKILL.mdSave it as .claude/skills/claims/SKILL.md (or your agent's skills folder).

name: claims
description: Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.

Claims Authorization Skill

Purpose

Claims-based authorization for secure agent operations and access control.

Claim Types

Claim	Description
`read`	Read file access
`write`	Write file access
`execute`	Command execution
`spawn`	Agent spawning
`memory`	Memory access
`network`	Network access
`admin`	Administrative operations

Commands

Check Claim

bash

npx claude-flow claims check --agent agent-123 --claim write

Grant Claim

bash

npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"

Revoke Claim

bash

npx claude-flow claims revoke --agent agent-123 --claim write

List Claims

bash

npx claude-flow claims list --agent agent-123

Scope Patterns

Pattern	Description
`*`	All resources
`/src/**`	All files in src
`/config/*.toml`	TOML files in config
`memory:patterns`	Patterns namespace

Security Levels

Level	Claims
`minimal`	read only
`standard`	read, write, execute
`elevated`	+ spawn, memory
`admin`	all claims

Best Practices

Follow principle of least privilege
Scope claims to specific resources
Audit claim usage regularly
Revoke claims when no longer needed

Cross-Host Work Claims (federation, v3.40.0+)

Distinct from the authorization claims above: work claims coordinate ownership of a task or resource across agents, and now propagate across a cross-host federation so a claim made on one node is visible to the whole swarm.

Runtime tools (local ledger)

Tool	Purpose
`claims_claim`	Take ownership of an issue/resource (with optional TTL).
`claims_release`	Give up a claim you hold.
`claims_handoff` / `claims_accept-handoff`	Transfer a claim to another agent.
`claims_steal` / `claims_mark-stealable`	Work-stealing for stalled claims.
`claims_status` / `claims_list`	Inspect current ownership.

Show full SKILL.md (212 more words)Show less

Federated (cross-host)

Publish claim events into a federation room (federation_bbs_publish) so ownership converges across hosts. Message types: ClaimIssued / ClaimReleased / ClaimHandoff / ClaimAck.

Rules: one owner per resourceId; first valid ClaimIssued wins (ties → earliest ts, then smallest from); ClaimReleased or expired TTL frees it; ClaimHandoff only from the current owner; a coordinator posts ClaimAck naming the authoritative owner.

Before shared work: claim, sync, and proceed only if you are the acknowledged owner. When a claim must be both cross-host visible and runtime-enforced, mirror the two — publish the federation claim message and call claims_claim. See the cross-host-federation skill (ruflo-bbs-federation plugin) for the transport.

Scoping a claim stream to a channel (ADR-386)

By default every claim event lands in the shared swarm stream, where any relay member reads it. To keep a team's ownership ledger separate — or unreadable by the rest of the relay — publish claim messages into a channel instead:

npx ruflo federation channel --action create --name platform-team --visibility private
npx ruflo federation channel --action grant --channel prv:<hex> --pubkey <teammate 64-hex>
npx ruflo federation channel --action publish --channel prv:<hex> \
  --type ClaimIssued --payload '{"resourceId":"repo/foo","ttlSeconds":7200}'
npx ruflo federation channel --action read --channel prv:<hex>

Reduction rules are unchanged; only the audience changes. Two caveats before relying on it: a private channel hides content but not metadata (the relay still sees who published and when), and a claim nobody outside the channel can read cannot arbitrate against a claim made outside it. If ownership must be swarm-wide, keep it on the open stream. See the open-federation skill for channel mechanics.

Files

Just SKILL.md in .agents/skills/claims of ruvnet/ruflo.

Open the folder on GitHubat commit 58e0ae7

Used in 2 other repositories

We found 2 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 2 other GitHub owners. This page covers the copy in ruvnet/ruflo, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Claims next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Claims compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Claims this skillruvnet/ruflo	74k	2 repos	~1.1k	Automated safety check: Pass	MIT	today
Configuring Horizoncoollabsio/coolify	63k	4 repos	~898	Automated safety check: Pass	MIT	today
K8s Security PoliciesCybereason-Public/owLSM	280	12 repos	~2k	Automated safety check: Pass	GPL-2.0	yesterday
Payloadpayloadcms/payload	45k	5 repos	~6.2k	Automated safety check: Pass	MIT	today
Convex Setup Authspokvulcan/poker-planning	114	8 repos	~1.8k	Automated safety check: Pass	MIT	5 days ago
Cognitoitsmostafa/aws-agent-skills	1.2k	1 repos	~2.3k	Automated safety check: Pass	MIT	3 days ago

Similar skills

Configuring Horizon
coollabsio/coolify
A skill your agent uses whenever the user mentions Horizon by name in a Laravel context.
63k GitHub starsUsed in 4 repos~898 tokens
Backend & APIsAuto-check passed
K8s Security Policies
Cybereason-Public/owLSM
Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.
280 GitHub starsUsed in 12 repos~2k tokens
Backend & APIsAuto-check passed
Payload
payloadcms/payload
A skill your agent uses when working with Payload projects (payload.config.ts, collections, fields, hooks, access control, Payload API).
45k GitHub starsUsed in 5 repos~6.2k tokens
Backend & APIsAuto-check passed
Convex Setup Auth
spokvulcan/poker-planning
Sets up Convex auth, identity mapping, and access control. An agent skill from spokvulcan/poker-planning.
114 GitHub starsUsed in 8 repos~1.8k tokens
Backend & APIsAuto-check passed
Cognito
itsmostafa/aws-agent-skills
AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills.
1.2k GitHub starsUsed in 1 repo~2.3k tokens
Backend & APIsAuto-check passed
Abp Authorization
abpframework/abp
ABP permission system - PermissionDefinitionProvider, [Authorize] attribute, CheckPolicyAsync, IsGrantedAsync, ICurrentUser, IPermissionManager, multi-tenancy side.
14k GitHub stars~1.3k tokensUpdated today
Backend & APIsAuto-check passed

Questions about Claims

What does Claims do?

Claims-based authorization for agents and operations. An agent skill from ruvnet/ruflo. Claims is an agent skill from ruvnet/ruflo. Claims-based authorization for agents and operations.

When should I use Claims?

Claims fits situations like: : permission management; secure operations; authorization checks.

How do I install Claims in Claude Code?

Run `npx skills add ruvnet/ruflo --skill claims -a claude-code`. Or copy the skill folder (.agents/skills/claims in ruvnet/ruflo) into .claude/skills/claims in your project. Claude Code loads it when a task matches its description.

How do I install Claims in Codex?

Run `npx skills add ruvnet/ruflo --skill claims -a codex`. Or copy the skill folder (.agents/skills/claims in ruvnet/ruflo) into .agents/skills/claims in your project. Codex loads it when a task matches its description.

Can I use Claims in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ruvnet/ruflo --skill claims -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/claims, .gemini/skills/claims, .github/skills/claims and .opencode/skills/claims in your project.

What does Claims need to run?

Going by SKILL.md and its folder, Claims needs the command-line tools its instructions call (npx). Our summary lists: Node.js.

Does Claims access the network?

SKILL.md contains no URLs. Its commands use npx, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Claims safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Claims use?

Claims is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Claims use?

About 1.1k tokens (SKILL.md is roughly 4.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Claims?

Skills that share tags, products or a category with Claims: Configuring Horizon (coollabsio/coolify, 63k stars), K8s Security Policies (Cybereason-Public/owLSM, 280 stars), Payload (payloadcms/payload, 45k stars) and Convex Setup Auth (spokvulcan/poker-planning, 114 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Claims?

ruvnet (a GitHub user) maintains it in ruvnet/ruflo, which has 74,159 GitHub stars. The repository holds 264 skills in this directory. The repository was last updated on October 9, 2026.

Source: ruvnet/ruflo on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Claims

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

Claims Authorization Skill

Purpose

Claim Types

Commands

Check Claim

Grant Claim

Revoke Claim

List Claims

Scope Patterns

Security Levels

Best Practices

Cross-Host Work Claims (federation, v3.40.0+)

Runtime tools (local ledger)

Federated (cross-host)

Scoping a claim stream to a channel (ADR-386)

Files

Used in 2 other repositories

Compare with similar skills

Similar skills

More from ruvnet/ruflo

Related

Questions about Claims