Best Authorization and RBAC skills, page 7

DevSecOps, container, and API operational defensive security reference: CI/CD pipeline hardening, secret scanning, IaC misconfiguration detection, SAST/DAST integration, container image scanning…

modu-ai/moai-adk

A skill your agent uses when an application issues and validates its own first-party JWT access and refresh tokens, including authentication filters, password encoding, RBAC, and method security.

rrezartprebreza/spring-boot-skills

A skill your agent uses when conducting a frontend security review — static analysis (risky HTML patterns, env var exposure), authentication/authorization audit (token storage, route guards…

mizchi/skills

Manage contacts, communication channels, access control, and invite links

vellum-ai/vellum-assistant

Configures AWS Resilience Hub v2 for multi-account resilience management across an AWS Organization.

aws/agent-toolkit-for-aws

Privilege system reference for the HMIS project. An agent skill from hmislk/hmis.

hmislk/hmis

Audit access control implementations for security vulnerabilities and misconfigurations.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when reviewing a Solidity, Vyper, or Rust (Solana/Anchor) smart contract for paid audit work or pre-launch sanity check.

elophanto/EloPhanto

A skill your agent uses when users get, create, edit, delete, or retrieve Salesforce Sharing Rules metadata for record-level access.

forcedotcom/sf-skills

A skill your agent uses when implementing the Frappe/ERPNext permission system.

Impertio-Studio/Frappe_Claude_Skill_Package

A skill your agent uses when creating or customizing Workspace pages in Frappe v14-v16.

Impertio-Studio/Frappe_Claude_Skill_Package

Authorized testing of access-control and business-logic flaws that pattern scanners cannot find — IDOR/BOLA, broken function-level authorization, mass assignment, business-logic abuse, and race…

ptn1411/skill

Run all audit checks (RBAC, hooks, design system, tests) and verify build

trycompai/comp

Architecture multitenant avec approche tiered (Shared/Dedicated Schema/DB), RBAC/ABAC, field-level encryption.

TheBeardedBearSAS/claude-craft

ANALYSIS SKILL — Find the right Azure RBAC role for an identity with least-privilege access; generate CLI, Bicep, and Terraform code to assign it.

jonathan-vella/apex

Set up Convex authentication with proper user management, identity mapping, and access control patterns.

vvedantb/eva

Guidance for Azure Policy — enforcing and auditing governance and security guardrails at scale across Azure with definitions, initiatives, assignments, and remediation tasks.

vinayaklatthe/microsoft-security-skills

Version-aware guide for configuring and running Apollo Router for federated GraphQL supergraphs.

apollographql/skills

Pilot a Databricks Hive Metastore (HMS) → Unity Catalog (UC) migration before the deadline — audit every table's migratability, produce a dependency-ordered migration plan, trace UC's two-level…

jeremylongshore/tons-of-skills-marketplace

Audit Snowflake effective access and produce a safe least-privilege change packet.

jeremylongshore/tons-of-skills-marketplace

A skill your agent uses when you need to design, review, or improve security in Quarkus applications — including Quarkus Security with JWT/OIDC, basic auth, @RolesAllowed / @Authenticated /…

jabrena/plinth

A skill your agent uses when you need to design, review, or improve security in Micronaut applications — including micronaut-security authentication, @Secured and intercept-url-map rules…

jabrena/plinth

OAuth 2.1 + JWT authentication security best practices. An agent skill from majiayu000/spellbook.

majiayu000/spellbook

Threat-model product features, APIs, data flows, secrets, permissions, supply-chain changes, auth boundaries, and risky code paths before or during implementation.

majiayu000/spellbook

Provides Bicep coding standards for Azure infrastructure in this repository.

microsoft-foundry/foundry-agent-webapp

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

jonathan-vella/apex

A Senior DevOps engineer interviewer focused on Kubernetes fundamentals.

PrepLabsAI/InterviewMentor

Concepts, external interfaces, and conventions for Gram's role-based access control (RBAC) subsystem — scopes, grants, principals, system roles, and the authz.Engine.Require enforcement path used…

speakeasy-api/gram

The Contracts & Security review perspective for PostHog Review.

PostHog/posthog

A skill your agent uses when the user asks "who has access", "audit permissions", "check user roles", "list API keys", "review access controls", "rotate API keys", "create API key", "delete expired…

coralogix/cx-cli

A skill your agent uses when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies.

aws/agent-toolkit-for-aws

A skill your agent uses to configure or inspect Salesforce Data Cloud DataSpace access for permission sets.

forcedotcom/sf-skills

Operate Notion workspace content through Notion MCP using the UXC CLI, including search, fetch, users/teams lookup, page/database creation and updates, and comments.

holon-run/uxc

Runs a guided, end-to-end security review of a Power Pages site and consolidates every finding into one HTML report covering source code and dependencies, the live site, browser headers, firewall…

microsoft/power-platform-skills

Unity Catalog governance, access control, and observability.

databricks/databricks-agent-skills

Set up the local development environment for APIView Copilot.

Azure/azure-sdk-tools

Operate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using doca-urom: pull the NGC image, choose the UCX…

NVIDIA/skills

Guidance for Azure Key Vault — securely storing and managing secrets, keys, and certificates with RBAC, network isolation, managed identity access, soft delete / purge protection, and rotation.

Kilo-Org/kilo-marketplace

Design, build, and optimize dashboards for RIA practice management with AUM tracking, revenue analytics, and KPI frameworks.

JoelLewis/finance_skills

Guide the design and management of trading venue connectivity and market data infrastructure.

JoelLewis/finance_skills

Generate professional prior authorization request letters for insurance companies with proper clinical justification and formatting.

aipoch/medical-research-skills

Validates cyber exercise authorization, scope, exclusions, runtime controls, expiry, stop and restart gates.

HoangNguyen0403/agent-skills-standard

Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits, Organizations quirks, and SAML/MFA…

aws/agent-toolkit-for-aws

Configures AWS WAF to filter web traffic: creating web access control lists (web ACLs) on CloudFront, Application Load Balancers, API Gateway, and AppSync; AWS Managed Rules tuned in Count mode…

aws/agent-toolkit-for-aws

Defensive security engineering judgment, distilled from a stronger model - invoke when THREAT MODELING a system or feature; making security-relevant design decisions (auth, crypto, trust boundaries…

telagod/code-abyss

A skill your agent uses when authoring PolicyRuleDefinition and PolicyRuleDefinitionSet metadata XML for Salesforce Data Cloud governance policies, or when editing .policyRuleDefinition /…

forcedotcom/sf-skills

Instruments authentication, authorization, and input-handling code paths to monitor security-relevant events and states at runtime.

ArabelaTso/Skills-4-SE

A skill your agent uses when writing code that processes user input, manages authentication or authorization, constructs database queries, handles file operations, interacts with external data…

NoobyGains/godmode