agentsclimarketplace
Sign in

Implementing privileged access workstation

Skill henriquescastilho/my-claude/.claude/skills/implementing-privileged-access-workstation

Design and implement Privileged Access Workstations (PAWs) with device hardening, just-in-time access, and integration with CyberArk or BeyondTrust for secure administrative operations.From its SKILL.md

Install
npx -y skills add henriquescastilho/my-claude --skill implementing-privileged-access-workstation

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its file declares

Copied from the file, not written here

The file declares its own license as Apache-2.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.3 KB, 348 tokens by cl100k_base, as published. Nobody here has run it

Implementing Privileged Access Workstation

Overview

A Privileged Access Workstation (PAW) is a hardened device dedicated to performing sensitive administrative tasks. This skill covers PAW design using the tiered administration model, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with privileged access management (PAM) platforms like CyberArk and BeyondTrust.

When to Use

  • When deploying or configuring implementing privileged access workstation capabilities in your environment
  • When establishing security controls aligned to compliance requirements
  • When building or improving security architecture for this domain
  • When conducting security assessments that require this implementation

Prerequisites

  • Windows 10/11 Enterprise with Virtualization Based Security (VBS)
  • Microsoft Intune or Active Directory Group Policy
  • CyberArk Privileged Access Security or BeyondTrust Password Safe (optional)
  • Python 3.9+ with requests, subprocess, json
  • Administrative access to target endpoints

Steps

  1. Audit current privileged access patterns and identify Tier 0/1/2 assets
  2. Configure device hardening baselines (AppLocker, Credential Guard, Device Guard)
  3. Enforce compliance policies via Intune or GPO
  4. Implement just-in-time access with time-limited admin group membership
  5. Integrate with CyberArk/BeyondTrust for credential vaulting
  6. Validate PAW configuration against CIS and Microsoft PAW guidance
  7. Monitor privileged sessions and generate compliance reports

Expected Output

  • JSON report listing device compliance status, hardening checks, JIT access windows, and PAM integration verification
  • Risk scoring per workstation with remediation recommendations

What ships with it: 3 files

20.4 KB alongside SKILL.md, 1 of them executable

references/

scripts/

Keep looking

Skills are one crate of 326,861. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.