Best Authorization and RBAC skills, page 2

Decides whether a feature belongs in the application or in one of five shared Arandu modules before adding permissions, wallets, tags, Markdown rendering or API docs.

arandu-io/arandu

A skill your agent uses when customizing, branding, or replacing the built-in FrontMCP OAuth pages (the login, consent, federated-select, incremental-authorization, and error pages) with your own…

agentfront/frontmcp

Work on Supercheck authentication, RBAC, tenant isolation, sessions, API and trigger keys, invitations, project membership, project variables, OAuth, super-admin behavior, SSRF, or…

supercheck-io/supercheck

A skill your agent uses when designing a test plan for a distributed or stateful system — anything with persistence, replication, consensus, retries, idempotency, async messaging, multi-tenancy, or…

shenli/distributed-system-testing

bkend.ai authentication — email/social login, JWT tokens, RBAC, session management.

ww-w-ai/bkit-claude-code

SPD V2 Quality. An agent skill from flaqai/backlink_skills.

flaqai/backlink_skills

Create or delegate Tenuo warrants from natural-language authority requirements.

tenuo-ai/tenuo

Claims-based authorization for agents and operations. An agent skill from ruvnet/ruflo.

ruvnet/ruflo

Authentication and authorization for ASP.NET Core. An agent skill from codewithmukesh/dotnet-claude-kit.

codewithmukesh/dotnet-claude-kit

Audit REST, GraphQL, and RPC APIs against the OWASP API Security Top 10 (2023).

briiirussell/cybersecurity-skills

Implements authentication using Rails 8 built-in generator. An agent skill from ThibautBaissac/rails_ai_agents.

ThibautBaissac/rails_ai_agents

Prepare an English YouTube release with local Chinese-to-English translation, subtitles and cover localization, then use a deterministic script connected to dedicated Chrome and YouTube Studio to…

Andonywang123/Epost

Stops an AsyncRedux (Flutter) action from dispatching. An agent skill from marcglasberg/async_redux.

marcglasberg/async_redux

LiteLLM-RS Authentication Architecture. An agent skill from majiayu000/litellm-rs.

majiayu000/litellm-rs

This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references,"…

zebbern/claude-code-guide

Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security.

aspectrr/deer

IDOR / BOLA hunting - two-account methodology, identifier discovery and UUID leak chaining, the trusted-identifier test, GraphQL node and nested-object IDOR, cross-tenant escalation, write and…

Encod3d-Sec/TORCH

A skill your agent uses when the user asks to query Shadmin admin platform resources (users, roles, menus, registered API resources) from a terminal — for example "list shadmin users", "show shadmin…

ahaodev/shadmin

Guide for creating a new policy engine under openbias/policy/engines/

open-bias/open-bias

Prepare or publish eunomia.dev Markdown articles on Juejin. An agent skill from eunomia-bpf/eunomia.dev.

eunomia-bpf/eunomia.dev

Enforce hexagonal architecture in the Rust backend. An agent skill from macro-inc/macro.

macro-inc/macro

A skill your agent uses when working on Gryph's AARM security layer or policy engine.

safedep/gryph

Manages who can reach Claude through a Discord channel: approve pairing codes, edit the allowlist and set direct-message and group policy.

anthropics/claude-plugins-official

Saves a Telegram bot token for the Telegram channel plugin and reviews who may message the bot, steering the policy toward a fixed allowlist.

anthropics/claude-plugins-official

Expert guide for Backend.AI distributed computing platform. An agent skill from lablup/backend.ai-webui.

lablup/backend.ai-webui

Create, update, prepare, or review a cloakbrowser-mcp GitHub Pull Request only when the user explicitly requests PR work.

swimmwatch/cloakbrowser-mcp

Implements age-gating mechanisms for online services to restrict access based on user age.

mukul975/Privacy-Data-Protection-Skills

Vulnerability and security scan (defensive, your own repo): dependency CVEs plus risky code patterns (secrets, injection, weak authz), severity x reachability triaged and remediated without…

maddhruv/absolute

Explains authorization in an Arandu Go application: write a Policy, get a security.Grant through security.Authorize, re-authorize each row, and keep tenant isolation.

arandu-io/arandu

Research backlink opportunities, record contact evidence, and generate personalized local outreach drafts from user-provided product and contact data.

kennyzir/7deer_skills

SOP for building multi-agent systems with CrewAI — role-based collaboration, sequential/hierarchical processes, Flows, memory, delegation.

agentsope/SkillAlchemy

This skill should be used when the user asks to "audit Laravel permissions", "review roles and permissions", "check authorization code", "find permission issues", "permissions review", "audit access…

LaravelDaily/AI-Workflows-For-Laravel

Worked bug bounty case study of a yield aggregator: target scoring, fund-flow mapping, prior audit triage and a verdict per bug class, with role misconfiguration in focus.

tradecatlabs/vibe-coding-cn

Audit, explain, or compare existing Tenuo warrants and delegation chains.

tenuo-ai/tenuo

A skill your agent uses when adding collaborative markdown, notes, or descriptions to a feature with collab surfaces.

macro-inc/macro

A skill your agent uses when the user asks about Model Context Protocol details (protocol spec, transports, authorization, tools/resources/prompts, sampling/elicitation/roots, server/client…

confluentinc/mcp-confluent

Detailed documentation of the 4 authentication systems, token lifecycle, middleware pipeline, session management, and RBAC authorization.

gjovanovicst/golang-auth-api

Audit a Sim dynamic selector across its declaration, browser-safe manifest, server attachment, provider primitive, and selectors.execute security boundary.

simstudioai/sim

Implement or review an end-to-end gocron HTTP API change. An agent skill from gocronx-team/gocron.

gocronx-team/gocron

A skill your agent uses when working with cognee's users, permissions, and multi-tenancy — creating users, tenants and roles, sharing datasets (read/write/delete/share grants), acting as a specific…

topoteretes/cognee

Test for authentication and authorization flaws including credential attacks, session issues, and access control bypasses

NeoTheCapt/RedteamAgent

Reference for SubductionPolicy (the four hooks authorizeConnect, authorizeFetch, authorizePut, filterAuthorizedFetch passed via Subduction.hydrate(..., policy) or new Repo({ subductionPolicy })).

dxos/dxos

Comprehensive SAP ABAP CDS (Core Data Services) reference for data modeling, view development, and semantic enrichment.

secondsky/sap-skills

Detect Insecure Direct Object Reference (IDOR) vulnerabilities in a codebase using a three-phase approach: recon (find candidates), batched verify (check authorization in parallel subagents, 3…

utkusen/sast-skills

Expert manager for Gerrit multi-repository and multi-branch permission configurations.

theneoai/awesome-skills

Clerk Organizations for B2B and multi-tenant apps - org switching, roles and permissions, verified domains, and enterprise SSO.

growupanand/ConvoForm

Manage WeChat access control (pairing codes and allowlist). An agent skill from qufei1993/cc-weixin.

qufei1993/cc-weixin

使用 NcatBot 框架开发 QQ 机器人或跨平台 Bot。当用户需要快速体验、创建插件、注册事件处理、发送消息、调用 Bot API、使用 Mixin/Hook、使用 CLI 工具、编写插件测试、或调试运行问题时触发此技能。Use when: 开发…

ncatbot/NcatBot