1089 个 · 按相关度排序
Audit Google Cloud access permissions to find overly broad roles, unnecessary service account keys, public access, and impersonation risks. Use gcloud CLI, Policy Analyzer, and IAM Recommender to document findings and plan more limited permissions.
中文简介正在准备中。当前显示英语简介。
Audit AWS S3 buckets for public exposure, excessive permissions, and gaps in encryption or versioning settings. Use AWS CLI, Prowler, and access analysis to compile findings, prioritize issues, and plan or apply configuration fixes.
中文简介正在准备中。当前显示英语简介。
This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude settings", "promote permissions to global", "clean up claude settings", "find permission patterns", or wants to identify project-local Claude Code permissions that should be added to global configuration.
中文简介正在准备中。当前显示原文说明。
Review HTTP response headers and restrict browser features an application does not need, such as camera, microphone, and location access. Guide Permissions-Policy settings that limit what attackers could use if the site is compromised.
中文简介正在准备中。当前显示英语简介。
Review GitHub Actions workflows for unsafe input handling, excessive token permissions, exposed secrets, and changeable action references. Get findings grouped by issue type, with severity ratings, exact YAML locations, and concrete fixes to review.
中文简介正在准备中。当前显示英语简介。
Analyze existing user permissions to propose roles for role-based access control, which assigns permissions by job role. Compare candidate role sets, identify overlap and excess access, and validate definitions against business responsibilities.
中文简介正在准备中。当前显示英语简介。
Find suitable grants and bidding opportunities, check eligibility before drafting, and prepare applications or responses to requests for proposals using past submissions and actual organizational data. It also tracks submission deadlines and reporting obligations after an award.
中文简介正在准备中。当前显示英语简介。
Manage organization-wide Atlassian administration, including user onboarding and removal, group permissions, sign-in settings, and app integrations. It provides workflows for access reviews, configuration changes, operational checks, and recovery planning, primarily through admin consoles and REST APIs.
中文简介正在准备中。当前显示英语简介。
Compare documented permissions and data boundaries with actual code to find meaningful gaps. Produce findings that connect each documented rule to implementation evidence, identify who could exploit it and who is affected, and propose a concrete fix.
中文简介正在准备中。当前显示英语简介。
Review pending submissions in NLA escrow arrangements, where assets are held until conditions are met. Compare submissions with demands, approve or reject them interactively or through an LLM, and record arbitration decisions on the blockchain.
中文简介正在准备中。当前显示英语简介。
Audits existing table permissions on a Power Pages site by analyzing them against site code and Dataverse metadata, then GRADES the configuration with deterministic 1–5 scores across 3 security/usability/correctness categories (9 dimensions). Detection is anchored by a recurring-issue catalog so findings and severities stay consistent run-to-run. Generates an HTML report with an at-a-glance verdict and per-category scores in the Overview plus a single list of **major/minor** issues (each major issue labelled permissions-only or upstream-caused with a short justification), and suggested fixes. Use when the user wants to review, verify, check, score, or grade table permissions for security issues.
中文简介正在准备中。当前显示原文说明。
Use when creating, assigning, or checking custom permissions to control feature access beyond CRUD and FLS. Trigger keywords: 'custom permission', 'FeatureManagement.checkPermission', '$Permission global variable', 'feature gate', 'named access grant', 'beta feature flag', 'SetupEntityAccess', 'requiredPermission', 'who has this custom permission'. NOT for gating Apex service code and its tests — use apex/apex-custom-permissions-check. NOT for permission set design — use admin/permission-set-architecture.
中文简介正在准备中。当前显示原文说明。
Manage payment permissions for AI agents with spending caps, expiration dates, and merchant rules. Use cryptographic signatures to verify authorization, coordinate approval from multiple agents for high-value purchases, and track or revoke payment permissions.
中文简介正在准备中。当前显示英语简介。
Guide browser tasks in the person's own Chrome using existing sign-ins. Covers tab management, site permissions, form entry, GIF recordings, and console inspection, with clear steps for handling connection failures and unresponsive pages.
中文简介正在准备中。当前显示英语简介。
Review recent Claude Code session logs to find frequently used read-only Bash commands and MCP tools, which connect agents to services. Rank suitable permission rules and merge them into project settings to reduce repeated approval prompts.
中文简介正在准备中。当前显示英语简介。
Plan product listings across startup, SaaS, AI, and MCP directories. Assess launch readiness, choose relevant sites, prepare tailored descriptions, and track submissions, published links, and referral results in a structured workflow.
中文简介正在准备中。当前显示英语简介。
Configure and audit AWS users, roles, and access policies. Work through least-privilege permissions, granting only the access needed, along with GitHub Actions authentication, cross-account access, permission boundaries, and checks for unused or excessive access.
中文简介正在准备中。当前显示英语简介。
Investigate Kubernetes permissions and cluster behavior in CTF sandboxes. Trace role-based access control, service accounts, and automated controllers to explain workload changes, secret exposure, and differences between configuration files and live objects.
中文简介正在准备中。当前显示英语简介。
Assess security in authorized cloud, container, and Kubernetes environments. Review excessive permissions, exposed resources, container isolation, and cluster access controls, then document findings with reproduction details and their impact.
中文简介正在准备中。当前显示英语简介。
Check Bicep infrastructure definitions before deploying to Azure. Validate syntax, preview resource changes, check deployment permissions, and produce a Markdown report of issues and recommendations using Azure CLI or Azure Developer CLI workflows.
中文简介正在准备中。当前显示英语简介。
Use CloudFox to inspect AWS and Azure resources through read-only queries. Identify exposed endpoints, secrets, permissions, and role trust relationships, then organize findings into files for reviewing configuration weaknesses and potential paths to broader access.
中文简介正在准备中。当前显示英语简介。
Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.
中文简介正在准备中。当前显示英语简介。
Audit Kubernetes RBAC, the rules that assign access through roles, to identify excessive permissions, risky role assignments, and paths to gaining higher privileges. Review service accounts and produce findings with recommended permission changes.
中文简介正在准备中。当前显示英语简介。
Audit Kubernetes access rules to find excessive permissions and service account token abuse paths. Trace which users or workloads could gain cluster administrator access, then produce prioritized findings and recommendations for reducing permissions.
中文简介正在准备中。当前显示英语简介。