Best Authorization and RBAC skills, page 10

Audit application database access layers for query construction, authorization placement, tenant scoping, transaction boundaries, consistency, credential authority, and observable durable effects.

cyberful/cyberful

Test service accounts, OAuth clients, workload federation, token exchange, audience binding, delegated actors, credential rotation, and machine-identity authorization.

cyberful/cyberful

MCP gateway setup for multi-server integration, security configuration, tool routing, and access control

Hack23/cia

A skill your agent uses when standing up the core AWS surface a small product needs: hardening a fresh account, a private S3 bucket, encrypted RDS Postgres, ECS Fargate vs EC2, CloudFront + OAC, or…

ericrisco/rsc-harness

A skill your agent uses whenever the design must structurally prevent invalid actions — input validation, disabled states, required fields, type-restricted inputs, mode locks, role-based gates…

hashgraph-online/awesome-codex-plugins

Provides authentication implementation patterns for Next.js 15+ App Router using Auth.js 5 (NextAuth.js).

giuseppe-trisciuoglio/developer-kit

Provides patterns for unit testing Spring Security with @PreAuthorize, @Secured, @RolesAllowed.

giuseppe-trisciuoglio/developer-kit

当未授权/零身份测试但路径不在主站 JS、禁止依赖登录 Network 截图、独立 H5/旧域名 NXDOMAIN/品牌迁域、兄弟域或同 IP Host 漏路径、网关 405 或 data 空数组、getRsaKey/JSEncrypt/前端加密被当成鉴权时调用。负责零身份公开面还原路径与密钥、响应指纹分流、加密证伪、迁域复查。JS 拆包见 recon-js-analysis；角色/IDOR…

zhaji2333/CkSKILLS

Assists with building secure JavaScript and TypeScript applications using the Deno runtime.

majiayu000/claude-skill-registry

For Bankr agents operating a Harness-provisioned wallet. An agent skill from BankrBot/skills.

BankrBot/skills

Drafts bounded cybersecurity engagement plans with objectives, scope, exclusions, roles, authorization, runtime controls, evidence, stop criteria, and restart gates.

HoangNguyen0403/agent-skills-standard

Harden Laravel apps with Policies for model authorization, Gate-based RBAC, validated mass assignment, and CSRF protection.

HoangNguyen0403/agent-skills-standard

Implement JWT authentication, RBAC guards, Helmet hardening, and Argon2 hashing in NestJS.

HoangNguyen0403/agent-skills-standard

Call a health plan's provider-services line about a claim with CALL-E, disclosing only the minimum patient identifiers that workflow needs, and return a schema-checked answer whose every field is…

CALLE-AI/awesome-phone-call-agents

Django 安全最佳实践、身份验证（Authentication）、授权（Authorization）、CSRF 防护、SQL 注入防御、XSS 防御以及安全部署配置。

xu-xiang/everything-claude-code-zh

Automated enforcement of GDPR Article 5(1)(e) storage limitation principle.

mukul975/Privacy-Data-Protection-Skills

Technical enforcement of GDPR Article 5(1)(b) purpose limitation principle.

mukul975/Privacy-Data-Protection-Skills

Implements HIPAA workforce training requirements under 45 CFR §164.530(b) (Privacy Rule) and 45 CFR §164.308(a)(5) (Security Rule).

mukul975/Privacy-Data-Protection-Skills

Implements HIPAA Privacy Rule requirements for research uses of protected health information under 45 CFR §164.512(i).

mukul975/Privacy-Data-Protection-Skills

Configures privacy settings for enterprise HR systems including SAP SuccessFactors, Workday, and BambooHR.

mukul975/Privacy-Data-Protection-Skills

Guide for mobile-specific consent management covering Apple ATT framework for iOS, Android permission model, in-app consent flows, SDK consent propagation to third-party libraries, and IDFA/GAID…

mukul975/Privacy-Data-Protection-Skills

Implement the NIST Privacy Framework PROTECT function covering PR.AC access control, PR.DS data security, and PR.PO protective policies.

mukul975/Privacy-Data-Protection-Skills

Design and implement Purpose-Based Access Control (PBAC) architecture including purpose ontology definition, policy engine configuration, audit logging of purpose verification at query time, and…

mukul975/Privacy-Data-Protection-Skills

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Focused security audit of code, calibrated to surface real exploitable bugs and suppress theoretical findings.

PostHog/posthog

AI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks.

LeoYeAI/openclaw-master-skills

AI-native hospital and multi-department healthcare ERP. An agent skill from LeoYeAI/openclaw-master-skills.

LeoYeAI/openclaw-master-skills

Configures Amazon CloudFront content delivery across six workflows: when to use CloudFront and how it fits with AWS WAF, Shield, CloudFront Functions, Lambda@Edge, Route 53, and origins (creating a…

aws/agent-toolkit-for-aws

Verify that an endpoint checks ownership, not just authentication.

Archive228/loopkit

AL permission set design for Business Central. An agent skill from javiarmesto/ALDC-AL-Development-Collection.

javiarmesto/ALDC-AL-Development-Collection

RBAC configuration, row policies, quotas, network security, audit logging, and access control best practices.

chmonitor/chmonitor

Manage Slack channel access control — pairing, allowlist, channel opt-in.

jeremylongshore/tons-of-skills-marketplace

Configure Anthropic enterprise organization management, Workspaces, and role-based access control for teams.

jeremylongshore/tons-of-skills-marketplace

Implement access control for multi-user Apple Notes automation.

jeremylongshore/tons-of-skills-marketplace

Configure Clay workspace roles, team access control, and credit budget allocation.

jeremylongshore/tons-of-skills-marketplace

Apply Clay security best practices for API keys, webhook secrets, and data access control.

jeremylongshore/tons-of-skills-marketplace

Configure RBAC and namespace isolation for CoreWeave multi-team GPU access.

jeremylongshore/tons-of-skills-marketplace

Secure CoreWeave deployments with RBAC, network policies, and secrets management.

jeremylongshore/tons-of-skills-marketplace

Apply security best practices for Fondo including OAuth token management, financial data protection, SOC 2 compliance, and access control.

jeremylongshore/tons-of-skills-marketplace

Apply Framer security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Implement security best practices for Gamma integration. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Map AD/Okta groups to Glean document permissions using allowedGroups.

jeremylongshore/tons-of-skills-marketplace

Apply Hex security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Apply Hootsuite security best practices for secrets and access control.

jeremylongshore/tons-of-skills-marketplace

Analyze kubernetes rbac analyzer operations. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Configure Lokalise enterprise SSO, role-based access control, and team management.

jeremylongshore/tons-of-skills-marketplace

Apply Lokalise security best practices for API tokens and access control.

jeremylongshore/tons-of-skills-marketplace

Author MCP tool-call policy rules without hand-editing access.json.

jeremylongshore/tons-of-skills-marketplace