682 skills · sorted by relevance
Audit Google Cloud access permissions to find overly broad roles, unnecessary service account keys, public access, and impersonation risks. Use gcloud CLI, Policy Analyzer, and IAM Recommender to document findings and plan more limited permissions.
Audit AWS S3 buckets for public exposure, excessive permissions, and gaps in encryption or versioning settings. Use AWS CLI, Prowler, and access analysis to compile findings, prioritize issues, and plan or apply configuration fixes.
This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude settings", "promote permissions to global", "clean up claude settings", "find permission patterns", or wants to identify project-local Claude Code permissions that should be added to global configuration.
The English summary is being prepared. Showing the original description.
Review HTTP response headers and restrict browser features an application does not need, such as camera, microphone, and location access. Guide Permissions-Policy settings that limit what attackers could use if the site is compromised.
Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.
Analyze existing user permissions to propose roles for role-based access control, which assigns permissions by job role. Compare candidate role sets, identify overlap and excess access, and validate definitions against business responsibilities.
Manage organization-wide Atlassian administration, including user onboarding and removal, group permissions, sign-in settings, and app integrations. It provides workflows for access reviews, configuration changes, operational checks, and recovery planning, primarily through admin consoles and REST APIs.
Compare documented permissions and data boundaries with actual code to find meaningful gaps. Produce findings that connect each documented rule to implementation evidence, identify who could exploit it and who is affected, and propose a concrete fix.
Audits existing table permissions on a Power Pages site by analyzing them against site code and Dataverse metadata, then GRADES the configuration with deterministic 1–5 scores across 3 security/usability/correctness categories (9 dimensions). Detection is anchored by a recurring-issue catalog so findings and severities stay consistent run-to-run. Generates an HTML report with an at-a-glance verdict and per-category scores in the Overview plus a single list of **major/minor** issues (each major issue labelled permissions-only or upstream-caused with a short justification), and suggested fixes. Use when the user wants to review, verify, check, score, or grade table permissions for security issues.
The English summary is being prepared. Showing the original description.
Use when creating, assigning, or checking custom permissions to control feature access beyond CRUD and FLS. Trigger keywords: 'custom permission', 'FeatureManagement.checkPermission', '$Permission global variable', 'feature gate', 'named access grant', 'beta feature flag', 'SetupEntityAccess', 'requiredPermission', 'who has this custom permission'. NOT for gating Apex service code and its tests — use apex/apex-custom-permissions-check. NOT for permission set design — use admin/permission-set-architecture.
The English summary is being prepared. Showing the original description.
Manage payment permissions for AI agents with spending caps, expiration dates, and merchant rules. Use cryptographic signatures to verify authorization, coordinate approval from multiple agents for high-value purchases, and track or revoke payment permissions.
Guide browser tasks in the person's own Chrome using existing sign-ins. Covers tab management, site permissions, form entry, GIF recordings, and console inspection, with clear steps for handling connection failures and unresponsive pages.
Review recent Claude Code session logs to find frequently used read-only Bash commands and MCP tools, which connect agents to services. Rank suitable permission rules and merge them into project settings to reduce repeated approval prompts.
Configure and audit AWS users, roles, and access policies. Work through least-privilege permissions, granting only the access needed, along with GitHub Actions authentication, cross-account access, permission boundaries, and checks for unused or excessive access.
Investigate Kubernetes permissions and cluster behavior in CTF sandboxes. Trace role-based access control, service accounts, and automated controllers to explain workload changes, secret exposure, and differences between configuration files and live objects.
Assess security in authorized cloud, container, and Kubernetes environments. Review excessive permissions, exposed resources, container isolation, and cluster access controls, then document findings with reproduction details and their impact.
Check Bicep infrastructure definitions before deploying to Azure. Validate syntax, preview resource changes, check deployment permissions, and produce a Markdown report of issues and recommendations using Azure CLI or Azure Developer CLI workflows.
Use CloudFox to inspect AWS and Azure resources through read-only queries. Identify exposed endpoints, secrets, permissions, and role trust relationships, then organize findings into files for reviewing configuration weaknesses and potential paths to broader access.
Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.
Audit Kubernetes RBAC, the rules that assign access through roles, to identify excessive permissions, risky role assignments, and paths to gaining higher privileges. Review service accounts and produce findings with recommended permission changes.
Audit Kubernetes access rules to find excessive permissions and service account token abuse paths. Trace which users or workloads could gain cluster administrator access, then produce prioritized findings and recommendations for reducing permissions.
Set up users, organizations, roles, and dataset sharing in cognee. The skill explains SDK and HTTP authentication, helps investigate permission errors or missing datasets, and clarifies how access settings separate each user’s stored data.
Share a Google Drive folder and its contents with collaborators. Find the folder by name, assign editing or viewing permissions to individual people, and check the resulting permissions after sharing.
Manage GBrain client registrations, permissions, and OAuth connections, a method for authorizing access. The skill separates server owner administration from ordinary client access and guides token invalidation, revocation, and connection verification.