Best Authorization and RBAC skills, page 5

Accept HTTP 402 cryptocurrency payments using Nethereum (.NET/C).

Nethereum/Nethereum

A skill your agent uses when the user asks to "pick which social channels to run", "should we be on X platform or 小红书", or "plan our organic social channel portfolio"; produces an…

aaron-he-zhu/aaron-marketing-skills

Full lifecycle team skill — plan, develop, test, review in one coordinated session.

catlog22/Claude-Code-Workflow

A skill your agent uses for any Python backend work in this project: building FastAPI endpoints, writing service functions, defining Pydantic/SQLModel schemas, running Alembic migrations, or…

avibebuilder/claude-prime

Review or harden security-sensitive behavior involving authentication, authorization, secrets, sessions, untrusted input, sensitive data, or trust boundaries.

dzhalaevd/Donatello

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access, and builds SIEM detection rules…

mukul975/Anthropic-Cybersecurity-Skills

Finds over-permissive RBAC roles and service-account token abuse paths in a Kubernetes cluster using kubectl auth can-i, rbac-police, kubectl-who-can, and rakkess, tracing which subjects can…

mukul975/Anthropic-Cybersecurity-Skills

Detect API enumeration attacks (BOLA/IDOR, OWASP API1:2023) by writing SIEM detection rules that flag sequential or UUID identifier iteration, parameter tampering, and mixed 200/401/403 response…

mukul975/Anthropic-Cybersecurity-Skills

Detect and test for OWASP API3:2023 Broken Object Property Level Authorization (BOPLA), covering excessive data exposure in API responses and mass assignment via injected request-body properties.

mukul975/Anthropic-Cybersecurity-Skills

Implement RPKI-based BGP route origin validation by creating Route Origin Authorizations (ROAs) at RIRs (ARIN, RIPE, APNIC, AFRINIC, LACNIC), deploying validator software (Routinator, FORT…

mukul975/Anthropic-Cybersecurity-Skills

Implements Delinea Secret Server for privileged access management, covering secret vault configuration, role-based access policies, automated password rotation, session recording, and Active…

mukul975/Anthropic-Cybersecurity-Skills

Deploys and configures Tofino industrial firewalls (Belden/Hirschmann) to protect SCADA systems and PLCs, using deep packet inspection of OT protocols (Modbus, EtherNet/IP, OPC, S7comm) to enforce…

mukul975/Anthropic-Cybersecurity-Skills

Implements 802.1X port-based network access control using RADIUS authentication, PacketFence NAC, and switch configuration to enforce identity-based access policies, posture assessment, and…

mukul975/Anthropic-Cybersecurity-Skills

Deploys Cisco Identity Services Engine (ISE) as a RADIUS policy server for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, dynamic VLAN assignment…

mukul975/Anthropic-Cybersecurity-Skills

Simulates ARP spoofing/cache-poisoning attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risk and validate Dynamic ARP…

mukul975/Anthropic-Cybersecurity-Skills

Audits and hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments: Purdue-level network placement, interface access control, secure DMZ…

mukul975/Anthropic-Cybersecurity-Skills

Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity (IRSA for EKS, Workload Identity for GKE, Managed Identities for…

mukul975/Anthropic-Cybersecurity-Skills

Designs and configures secure remote access to OT/ICS environments for operators, engineers, and vendors: jump server architecture, multi-factor authentication, session recording, privileged access…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when deciding who may do what — ownership checks, policy modules, scoped queries, role-based access in LiveViews and controllers.

j-morgan6/elixir-phoenix-guide

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces.

google/skills

Operate servers and services with read-only-first diagnosis, explicit authorization, auditable inventory, operation records, rollback, and verification.

holon-run/holon

Clerk Organizations for B2B SaaS - create multi-tenant apps with org switching, role-based access, verified domains, and enterprise SSO.

geekskai/blog

Provision, verify, and connect a self-hosted Temps platform instance on an explicitly authorized machine.

gotempsh/temps

Detect missing authentication and broken function-level authorization vulnerabilities in a codebase using a three-phase approach: recon (map endpoints and the role/permission system), batched verify…

utkusen/sast-skills

Build direct Bluetooth Low Energy workflows with Core Bluetooth.

dpearson2699/swift-ios-skills

Access eligible Wallet financial data using FinanceKit and FinanceKitUI.

dpearson2699/swift-ios-skills

Integrate Apple Pay payments and Wallet passes using PassKit.

dpearson2699/swift-ios-skills

Access research-grade sensor data using SensorKit for approved studies.

dpearson2699/swift-ios-skills

Comprehensive REST API design review with automated linting, breaking-change detection, and design scorecards.

alirezarezvani/claude-skills

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.

elementalsouls/Claude-BugHunter

Operating production Kubernetes clusters effectively with resource management, advanced scheduling, networking, storage, security hardening, and autoscaling.

ancoleman/ai-design-components

Authentication, authorization, and API security implementation.

ancoleman/ai-design-components

Universal SQL code review assistant that performs comprehensive security, maintainability, and code quality analysis across all SQL databases (MySQL, PostgreSQL, SQL Server, Oracle).

github/awesome-copilot

Enterprise compliance and governed workspace behavior for SuperLocalMemory.

qualixar/superlocalmemory

Detects logic vulnerabilities in smart contracts by analyzing guard-state consistency patterns.

quillai-network/quillshield_skills

Guides PostHog engineers through dashboard widget platform work — ship a new widgettype (WIDGETREGISTRY, catalog, runwidgets, WidgetCard) or update a shipped type (config, query, layout, RBAC, tile…

PostHog/posthog

A skill your agent uses when designing, deploying, or debugging a Butterbase Agent (declarative LLM/tool graph), registering an MCP server for tool use, or wiring access controls and rate limits.

butterbase-ai/butterbase-skills

Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.

alt-research2/SolidityGuard

Create managed Iceberg tables using Amazon S3 Tables (s3tables API namespace) with automatic compaction and snapshot management.

aws/agent-toolkit-for-aws

Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations.

aws/agent-toolkit-for-aws

Automate payer review of prior authorization (PA) requests. An agent skill from FreedomIntelligence/OpenClaw-Medical-Skills.

FreedomIntelligence/OpenClaw-Medical-Skills

A skill your agent uses when performing initial audit reconnaissance.

ccashwell/evm-cortex

Implement or review authentication and authorization with explicit token, session and resource-access boundaries.

sickn33/agentic-awesome-skills

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.

sickn33/agentic-awesome-skills

Shared discipline for every hunt- skill: scope and authorization gating, the two-account rule, the confirmation gate that separates a real finding from a false positive, enumeration limits, stop…

Encod3d-Sec/TORCH

Configures secure OAuth 2.0 authorization flows, including Authorization Code with PKCE, Client Credentials, and Device Authorization Grant, covering flow selection, PKCE implementation, token…

mukul975/Anthropic-Cybersecurity-Skills

Drive a federal system through the NIST Risk Management Framework (SP 800-37 Rev 2) to an Authorization to Operate (ATO): Prepare, Categorize (FIPS 199), Select a control baseline (FIPS 200 / SP…

mukul975/Anthropic-Cybersecurity-Skills

Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure, covering vault architecture, session isolation…

mukul975/Anthropic-Cybersecurity-Skills