azure-role-selector

23.2k

github

When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.

api-credentials-hygiene

1.8k

openclaw

Audits and hardens API credential handling (env vars, separation, rotation plan, least privilege, auditability). Use when integrating services or preparing production deployments where secrets must be managed safely.

azure-rbac

1.6k

microsoft

Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. USE FOR: "what role should I assign", "least privilege role", "RBAC role for", "role to read blobs", "role for managed identity", "custom role definition", "assign role to identity". DO NOT USE FOR: creating or configuring managed identities, or general Azure security hardening; those are out of scope for this role-selection skill.

vastai-security-basics

1.5k

jeremylongshore

Apply Vast.ai security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Vast.ai security configuration. Trigger with phrases like "vastai security", "vastai secrets", "secure vastai", "vastai API key security".

fireflies-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Fireflies Security Basics

Apply Fireflies.ai security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Fireflies.ai security configuration. Trigger with phrases like "fireflies security", "fireflies secrets", "secure fireflies", "fireflies API key security".

ideogram-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Ideogram Security Basics

Apply Ideogram security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Ideogram security configuration. Trigger with phrases like "ideogram security", "ideogram secrets", "secure ideogram", "ideogram API key security".

lokalise-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Lokalise Security Basics

Apply Lokalise security best practices for API tokens and access control. Use when securing API tokens, implementing least privilege access, or auditing Lokalise security configuration. Trigger with phrases like "lokalise security", "lokalise secrets", "secure lokalise", "lokalise API token security".

exa-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Exa Security Basics

Apply Exa security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Exa security configuration. Trigger with phrases like "exa security", "exa secrets", "secure exa", "exa API key security".

perplexity-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Perplexity Security Basics

Apply Perplexity security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security".

clay-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Clay Security Basics

Apply Clay security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Clay security configuration. Trigger with phrases like "clay security", "clay secrets", "secure clay", "clay API key security".

managing-network-policies

1.5k

jeremylongshore

Execute use when managing Kubernetes network policies and firewall rules. Trigger with phrases like "create network policy", "configure firewall rules", "restrict pod communication", or "setup ingress/egress rules". Generates Kubernetes NetworkPolicy manifests following least privilege and zero-trust principles.

windsurf-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Windsurf Security Basics

Apply Windsurf security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Windsurf security configuration. Trigger with phrases like "windsurf security", "windsurf secrets", "secure windsurf", "windsurf API key security".

posthog-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Posthog Security Basics

Apply PostHog security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing PostHog security configuration. Trigger with phrases like "posthog security", "posthog secrets", "secure posthog", "posthog API key security".

instantly-security-basics

1.5k

jeremylongshore

Apply Instantly security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Instantly security configuration. Trigger with phrases like "instantly security", "instantly secrets", "secure instantly", "instantly API key security".

replit-security-basics

1.5k

jeremylongshore

Apply Replit security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Replit security configuration. Trigger with phrases like "replit security", "replit secrets", "secure replit", "replit API key security".

vercel-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Vercel Security Basics

Execute apply Vercel security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Vercel security configuration. Trigger with phrases like "vercel security", "vercel secrets", "secure vercel", "vercel API key security".

groq-security-basics

1.5k

jeremylongshore

Apply Groq security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Groq security configuration. Trigger with phrases like "groq security", "groq secrets", "secure groq", "groq API key security".

supabase-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Supabase Security Basics

Execute apply Supabase security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Supabase security configuration. Trigger with phrases like "supabase security", "supabase secrets", "secure supabase", "supabase API key security".

firecrawl-security-basics

1.5k

jeremylongshore

Apply FireCrawl security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing FireCrawl security configuration. Trigger with phrases like "firecrawl security", "firecrawl secrets", "secure firecrawl", "firecrawl API key security".

mistral-security-basics

1.5k

jeremylongshore

Apply Mistral AI security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Mistral AI security configuration. Trigger with phrases like "mistral security", "mistral secrets", "secure mistral", "mistral API key security".

retellai-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Retellai Security Basics

Apply Retell AI security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Retell AI security configuration. Trigger with phrases like "retellai security", "retellai secrets", "secure retellai", "retellai API key security".

coderabbit-security-basics

1.5k

Jeremylongshore Claude Code Plugins Plus Skills Coderabbit Security Basics

Apply CodeRabbit security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing CodeRabbit security configuration. Trigger with phrases like "coderabbit security", "coderabbit secrets", "secure coderabbit", "coderabbit API key security".

databricks-security-basics

1.5k

jeremylongshore

Apply Databricks security best practices for secrets and access control. Use when securing API tokens, implementing least privilege access, or auditing Databricks security configuration. Trigger with phrases like "databricks security", "databricks secrets", "secure databricks", "databricks token security", "databricks scopes".

azure-role-selector

188

aiskillstore

When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.

aws-cloudformation-iam

126

giuseppe-trisciuoglio

Provides AWS CloudFormation patterns for IAM users, roles, policies, and managed policies. Use when creating IAM resources with CloudFormation, implementing least privilege access, configuring cross-account access, setting up identity centers, managing permissions boundaries, and organizing template structure with Parameters, Outputs, Mappings, Conditions for secure infrastructure deployments.

zero-trust-architecture

95

aj-geddes

Implement Zero Trust security model with identity verification, microsegmentation, least privilege access, and continuous monitoring. Use when building secure cloud-native applications.

controller-cli

73

keep-starknet-strange

Use when installing and operating the Cartridge Controller CLI (`controller`) to create human-approved sessions and execute Starknet transactions (JSON-only, explicit network selection, least-privilege policy scoping, paymaster control, and error recovery).

policy-opa

64

AgentSecOps

Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA). Use when: (1) Enforcing security and compliance policies across infrastructure and applications, (2) Validating Kubernetes admission control policies, (3) Implementing policy-as-code for compliance frameworks (SOC2, PCI-DSS, GDPR, HIPAA), (4) Testing and evaluating OPA Rego policies, (5) Integrating policy checks into CI/CD pipelines, (6) Auditing configuration drift against organizational security standards, (7) Implementing least-privilege access controls.

powershell-security-hardening

39

404kidwiz

Expert in Windows security hardening and PowerShell security configuration. Specializes in securing automation, enforcing least privilege, and aligning with enterprise security baselines. Use for securing PowerShell environments and Windows systems. Triggers include "PowerShell security", "constrained language mode", "JEA", "execution policy", "security baseline", "PowerShell logging".

claude-code-agents

34

vasilyu1983

Create and maintain Claude Code agents/subagents (.claude/agents/*.md) with YAML frontmatter (name/description/tools/model/permissionMode/skills/hooks), least-privilege tool selection, delegation patterns (Task), context budgeting, and safety best practices.

aws-iam

10

BagelHole

Manage IAM users, roles, and policies. Implement least-privilege access and security best practices. Use when configuring AWS identity and access management.

security-expert

8

mae616

Assuming OWASP fundamentals, design, implement, and review without dropping secure-by-default controls (input validation/authorization/secrets/audit logs/SSR/CSRF, etc.). Identify threats and attack surfaces and use least privilege and safe-failure principles to protect.

Azure Role Selector

8

yldgio

Select and configure appropriate Azure RBAC roles following the principle of least privilege for secure access control

access-control

5

Hack23

Least privilege principle, RBAC, authentication, authorization, and session management following Hack23 Access Control Policy

aws-iam-best-practices

4

ngxtm

IAM policy review, hardening, and least privilege implementation

implementing-zero-standing-privilege-with-cyberark

2

mukul975

Deploy CyberArk Secure Cloud Access to eliminate standing privileges in hybrid and multi-cloud environments using just-in-time access with time, entitlement, and approval controls.

implementing-aws-iam-permission-boundaries

2

mukul975

Configure IAM permission boundaries in AWS to delegate role creation to developers while enforcing maximum privilege limits set by the security team.

None

2

mukul975

Implement Just-In-Time (JIT) access provisioning to eliminate standing privileges by granting temporary, time-bound access only when needed. This skill covers JIT architecture design, approval workflo

securing-serverless-functions

2

mukul975

This skill covers security hardening for serverless compute platforms including AWS Lambda, Azure Functions, and Google Cloud Functions. It addresses least privilege IAM roles, dependency vulnerability scanning, secrets management integration, input validation, function URL authentication, and runtime monitoring to protect against injection attacks, credential theft, and supply chain compromises.

implementing-rbac-hardening-for-kubernetes

2

mukul975

Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.

performing-privileged-account-access-review

2

mukul975

Conduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.

securing-aws-lambda-execution-roles

2

mukul975

Securing AWS Lambda execution roles by implementing least-privilege IAM policies, applying permission boundaries, restricting resource-based policies, using IAM Access Analyzer to validate permissions, and enforcing role scoping through SCPs.

None

2

mukul975

Configure Kubernetes Role-Based Access Control (RBAC) to enforce least-privilege access to cluster resources. This skill covers Role/ClusterRole design, RoleBinding configuration, service account secu

securing-aws-iam-permissions

2

mukul975

This skill guides practitioners through hardening AWS Identity and Access Management configurations to enforce least privilege access across cloud accounts. It covers IAM policy scoping, permission boundaries, Access Analyzer integration, and credential rotation strategies to reduce the blast radius of compromised identities.

implementing-network-segmentation-with-firewall-zones

2

mukul975

Design and implement network segmentation using firewall security zones, VLANs, ACLs, and microsegmentation policies to restrict lateral movement and enforce least-privilege network access.

auditing-aws-s3-bucket-permissions

2

mukul975

Systematically audit AWS S3 bucket permissions to identify publicly accessible buckets, overly permissive ACLs, misconfigured bucket policies, and missing encryption settings using AWS CLI, S3audit, and Prowler to enforce least-privilege data access controls.

implementing-microsegmentation-with-guardicore

2

mukul975

Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.

building-role-mining-for-rbac-optimization

2

mukul975

Apply bottom-up and top-down role mining techniques to discover optimal RBAC roles from existing user-permission assignments, reducing role explosion and enforcing least privilege.