Best Authorization and RBAC skills, page 6

Quarkus認証、認可、JWT/OIDC、RBAC、入力検証、CSRF、シークレット管理、依存関係セキュリティのセキュリティベストプラクティス。

affaan-m/ECC

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

affaan-m/ECC

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-state-trace, depth-external

PlamenTSV/plamen

Complete guide for building MCP servers with FastMCP 3.0 - tools, resources, authentication, providers, middleware, and deployment.

davila7/claude-code-templates

Operate servers and services with read-only-first diagnosis, explicit authorization, auditable inventory, operation records, rollback, and verification.

holon-run/holon

SAP Cloud Identity Services for BTP applications: Identity Authentication (IAS), Identity Provisioning (IPS), and Authorization Management (AMS).

secondsky/sap-skills

SAP Cloud Application Programming Model (CAP) development skill using Capire documentation.

secondsky/sap-skills

Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmed security breach.

mukul975/Anthropic-Cybersecurity-Skills

Configures Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control, covering signal-based policy design, device compliance requirements, risk-based authentication…

mukul975/Anthropic-Cybersecurity-Skills

Configures Google BeyondCorp Enterprise Identity-Aware Proxy (IAP) as the access enforcement point for web applications, defining Access Context Manager access levels from device trust and network…

mukul975/Anthropic-Cybersecurity-Skills

Discovers and inventories privileged accounts across enterprise infrastructure, including domain admins, local admins, service accounts, database admins, cloud IAM roles, and application admin…

mukul975/Anthropic-Cybersecurity-Skills

Discover a single-page-app's hidden backend API from its public JS bundle, then test that API for broken access control / missing authentication.

elementalsouls/Claude-BugHunter

Pre-deployment validation for Azure readiness. An agent skill from microsoft/GitHub-Copilot-for-Azure.

microsoft/GitHub-Copilot-for-Azure

Automatically discover security skills when working with authentication, authorization, input validation, security headers, vulnerability assessment, or secrets management.

rand/cc-polymath

Audit & fix RBAC and audit log compliance in API endpoints and frontend components

trycompai/comp

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it…

trycompai/comp

Plans and configures multi-tenancy on GKE. An agent skill from google/skills.

google/skills

Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security.

google/skills

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or…

google/skills

Guides PostHog engineers through dashboard platform and scene changes.

PostHog/posthog

Run an enterprise security review of a system design or existing code before it ships.

ooiyeefei/ccc

The discussion-only playbook for a Persona — a council participant instantiated as a real agent from the persona role template (SS-02).

Prismer-AI/PrismerCloud

A skill your agent uses when administering a Scenario team from an agent through MCP: restricting which models a team or project can run (model access control, allowlist, blocklist), inviting or…

scenario-labs/skills

SAP Datasphere development skill with 3 specialized agents, 5 slash commands, and validation hooks.

secondsky/sap-skills

Load, convert, and manipulate Hi-C contact matrices using cooler format.

FreedomIntelligence/OpenClaw-Medical-Skills

Security review checklist for Convex functions, auth logic, public queries, admin routes, webhooks, uploads, and AI-generated code.

waynesutton/markdown-site

A skill your agent uses for anything about testing FrontMCP servers: writing or running unit, integration, and E2E tests and reaching the 95%+ coverage bar.

agentfront/frontmcp

Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).

google/skills

Coordinate complex Rudder delivery when concurrent integration, runtime/data identity, or release gates require a machine-readable evidence packet.

Undertone0809/rudder

The method for finding the gap between what a system is supposed to do and what the code actually does — the class of bug generic scanners miss because they have no model of intent.

phuryn/pm-skills

Migrate react-api-client useMutation hooks to useDocumentedMutation and update app callsites, tests, api-client userNotes, and auditlog keys.

Opentrons/opentrons

Investigate how a concept, code path, application, network flow, system, incident, document, or local artifact actually works, then deliver a two-depth visual HTML explainer with a dead-simple…

majiayu000/spellbook

Frontend visual replication skill. An agent skill from zai-org/GLM-skills.

zai-org/GLM-skills

SAP Analytics Cloud (SAC) automated testing skill for designing capability-gated browser discovery and deterministic Playwright test suites for SAC stories, dashboards, reports, planning workflows…

secondsky/sap-skills

Explains what a member or a role can do in a PostHog project, using the access control MCP tools.

PostHog/posthog

Work on Luxury Yacht RBAC permission checks, capability descriptors, permission-denied diagnostics, object action availability, YAML/edit/delete/scale/restart gating, and capability tests

luxury-yacht/app

Enhancement overlay for multi-agent / tool-using coder agents.

agentsope/SkillAlchemy

Generate/create/scaffold Kubernetes YAML — Deployment, Service, ConfigMap, Ingress, RBAC, StatefulSet, CRDs.

akin-ozer/cc-devops-skills

A skill your agent uses when the user says 'audit API', 'check API security', 'API routes security', 'endpoint audit', 'check my routes', or needs to verify API route protection.

cwinvestments/memstack

A skill your agent uses when the user says 'check RLS', 'audit RLS', 'RLS policies', 'row level security', 'Supabase security audit', or needs to verify table-level access control.

cwinvestments/memstack

Kubernetes operations: debugging, security, RBAC, and infrastructure tooling.

notque/vexjoy-agent

Overview of how Human Phone authorization and delegation artifacts work.

pockebot/openpocket

Secures Helm chart deployments by verifying chart signatures and provenance, rendering and linting templates for misconfiguration, enforcing pod security contexts through values.yaml, moving secrets…

mukul975/Anthropic-Cybersecurity-Skills

DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning…

modu-ai/moai-adk

A skill your agent uses when designing, deploying, or debugging a Butterbase Agent (declarative LLM/tool graph), registering an MCP server for tool use, or wiring access controls and rate limits.

butterbase-ai/butterbase-skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

A skill your agent uses when an application issues and validates its own first-party JWT access and refresh tokens, including authentication filters, password encoding, RBAC, and method security.

rrezartprebreza/spring-boot-skills

Manage contacts, communication channels, access control, and invite links

vellum-ai/vellum-assistant