Best Authorization and RBAC skills, page 3

Run full pre-commit validation (fmt, lint, test, security) and report results

openfga/go-sdk

Implement AlarmKit alarms and countdown timers for iOS and iPadOS with Lock Screen, Dynamic Island, StandBy, and paired Apple Watch system UI.

dpearson2699/swift-ios-skills

Curated collection of high-quality prompts for various use cases.

davila7/claude-code-templates

Authentication and authorization patterns including OAuth2, JWT, RBAC, session management, and PKCE flows

rohitg00/awesome-claude-code-toolkit

Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…

vinayaklatthe/microsoft-security-skills

Creates new API endpoints, and converts older ones, with the defineRoute() pattern used in cod-server, including auth strategies, scopes and OpenAPI output.

bighadj22/codflow

Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based…

giuseppe-trisciuoglio/developer-kit

Documents the OmniRoute REST endpoints for creating, listing, updating, regenerating and deleting API keys, with per-key scopes, spending limits, expiry and device lists.

diegosouzapw/OmniRoute

A skill your agent uses when building a feature on reusable database storage or UI, such as CRM, or deciding whether it needs a Macro database entity.

macro-inc/macro

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, RBAC drift, and client telemetry privacy.

langfuse/langfuse

Kubernetes workload patterns, resource management, RBAC, probes, autoscaling, ConfigMap/Secret handling, and kubectl debugging for production-grade deployments.

timothywarner-org/claude-code

Database migration creation with mandatory RLS policies and ARCHitect approval workflow. Use when creating migrations, adding tables with RLS…

bybren-llc/safe-agentic-workflow

Access control design patterns for Solidity protocols. An agent skill from ccashwell/evm-cortex.

ccashwell/evm-cortex

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

affaan-m/ECC

Interactive WhatsApp channel onboarding — guides through device linking, phone number config, and access control setup

Rich627/whatsapp-claude-plugin

Set up Convex authentication with proper user management, identity mapping, and access control patterns.

waynesutton/markdown-site

CORS misconfiguration testing for data theft and access control bypass

NeoTheCapt/RedteamAgent

Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules…

redis/agent-skills

A skill your agent uses when implementing authorization and access control for FrontMCP tools, resources, prompts, or skills, deciding who may invoke what.

agentfront/frontmcp

Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin.

ever-works/ever-works

This skill should be used when the user asks to "review the security architecture", "check authentication patterns", "evaluate trust boundaries", "review encryption implementation", "assess…

bitwarden/ai-plugins

Create or migrate a protected Sim resource operation in the shared Principal and application-use-case architecture across internal APIs, public or versioned APIs, Copilot, and other trusted tool…

simstudioai/sim

Guides designing a layered permission pipeline for agent tools that decides which calls are allowed, need confirmation or are denied, with scopes and hooks.

simbajigege/book2skills

Creates and manages tokenized Solana vaults with the GLAM CLI and TypeScript SDK, including Jupiter swaps, Kamino lending, staking, access control and investor subscriptions.

internet-court/internet-court-skill

Complete module inventory of the Auth API project with file paths, dependencies, and architecture overview.

gjovanovicst/golang-auth-api

Manage PostgreSQL migrations, typed SQL queries, generated Rust bindings, and database authorization in Rust on Nails applications.

bionic-gpt/bionic-gpt

Reviews a diff, module or network surface for exploitable defects, mapping trust boundaries and sinks, then reports only findings with a verified reachable path and a fix.

codewhale-hq/Codewhale

Add or change a REST API resource in agent-manager-service (the Go control plane).

wso2/agent-manager

Configure portal cookie names, prefixes, domains, paths, attributes, and refresh overrides.

greenpau/caddy-security

Review Convex security audit patterns for authentication and authorization.

IgorWarzocha/Opencode-Workflows

Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues.

zebbern/claude-code-guide

Laravel security best practices for authn/authz, validation, CSRF, mass assignment, file uploads, secrets, rate limiting, and secure deployment.

affaan-m/ECC

A skill your agent uses when implementing authentication (login, token issuance) or authorization (access control, permissions).

aiming-lab/MetaClaw

Manage Grafana Cloud accounts — organizations, stacks, RBAC roles and assignments, SSO/SAML/OAuth/GitHub auth, service accounts for CI/CD, user invites, team membership, and API-driven provisioning.

grafana/skills

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

davila7/claude-code-templates

Connects messaging channels to NanoClaw agent groups, sets isolation and engagement defaults, and reports which channels are wired, unwired or not configured.

nanocoai/nanoclaw

Implement and review trust-platform HMI schema/value/write contracts with safety guardrails.

johannesPettersson80/trust-platform

Implement a new or changed Supercheck feature end to end across schema, auth/RBAC, services, routes/actions, UI, queues/workers, CLI/recorder, tests, docs, and deployment contracts.

supercheck-io/supercheck

Reference guidance for Azure Advisor work: recommendations, alerts and digests, workbooks, RBAC access and sovereign-cloud limits, fetched from Microsoft Learn.

MicrosoftDocs/Agent-Skills

Analyzes Solidity contract entry points to map attack surface.

alt-research2/SolidityGuard

Azure Resource Manager SDK for Cosmos DB in .NET. An agent skill from microsoft/skills.

microsoft/skills

AWS Identity and Access Management for users, roles, policies, and permissions.

itsmostafa/aws-agent-skills

Prepare, deduplicate, create, triage, update, close, or safely retry NiceEval GitHub Issues from public sanitized observations.

NiceEval/NiceEval

Complete HTTP route structure with auth layers, middleware chains, rate limiting, and handler mappings for all API and GUI endpoints.

gjovanovicst/golang-auth-api

Implement Axum loaders and actions using Rust on Nails typed routing, authorization, validation, HTML rendering, and persistence boundaries.

bionic-gpt/bionic-gpt

Diagnose and fix OCI AI Quick Actions (AQUA) issues including deployment failures, OOM errors, authorization problems, capacity issues, container errors, and policy misconfigurations.

oracle/accelerated-data-science

A skill your agent uses when reviewing code for security vulnerabilities, hardening an application, or deriving security requirements from OWASP/ASVS guidance.

jellydn/my-ai-tools