Auth access control
Skill jukrap/ai-agent-playbook/skills/security/auth-access-control
Reusable AI agent skills, project templates, and guardrails for safer software maintenance and delivery.
npx -y skills add jukrap/ai-agent-playbook --skill auth-access-controlAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Use when changing login, sessions, OAuth/OIDC, JWTs, RBAC, permissions, roles, tenants, scopes, or object-level authorization.
SKILL.md
0.8 KB, as published. Nobody here has run it
Auth Access Control
Use this as the primary security skill for authentication and authorization changes.
Workflow
- Identify actors, resources, actions, ownership, tenant/project scope, and trust boundaries.
- Separate authentication, session/token handling, authorization decisions, and UI affordances.
- Confirm default-deny behavior, object-level checks, privilege escalation paths, and audit/logging needs.
- Verify allowed, denied, expired/invalid session, cross-tenant, and direct-object-access cases.
Reference
Read references/auth-access-control-checklist.md before editing auth, permission, role, tenant, or field/data access behavior.