Enforces fine-grained permission control for AI agents using a claims-based system.
Install
mkdir -p .claude/skills/claims && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/8832" && unzip -o skill.zip -d .claude/skills/claims && rm skill.zipInstalls to .claude/skills/claims
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.Key capabilities
- →Grant permissions to agents
- →Revoke agent access rights
- →Verify current agent claims
- →List active agent permissions
How it works
The skill uses a command-line interface to manage claims-based authorization, allowing users to grant, revoke, and audit specific permissions for agents.
Inputs & outputs
When to use claims
- →Grant agent read/write access
- →Audit agent permissions
- →Restrict agent access to sensitive files
About this skill
Claims Authorization Skill
Purpose
Claims-based authorization for secure agent operations and access control.
Claim Types
| Claim | Description |
|---|---|
read | Read file access |
write | Write file access |
execute | Command execution |
spawn | Agent spawning |
memory | Memory access |
network | Network access |
admin | Administrative operations |
Commands
Check Claim
npx claude-flow claims check --agent agent-123 --claim write
Grant Claim
npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"
Revoke Claim
npx claude-flow claims revoke --agent agent-123 --claim write
List Claims
npx claude-flow claims list --agent agent-123
Scope Patterns
| Pattern | Description |
|---|---|
* | All resources |
/src/** | All files in src |
/config/*.toml | TOML files in config |
memory:patterns | Patterns namespace |
Security Levels
| Level | Claims |
|---|---|
minimal | read only |
standard | read, write, execute |
elevated | + spawn, memory |
admin | all claims |
Best Practices
- Follow principle of least privilege
- Scope claims to specific resources
- Audit claim usage regularly
- Revoke claims when no longer needed
When not to use it
- →When working in open-access environments
- →When performing single-agent local tasks
Limitations
- →Requires manual auditing of claim usage
- →Limited to the defined claim types and scope patterns
How it compares
It provides centralized, granular control over agent capabilities instead of relying on implicit or unrestricted access.
Compared to similar skills
claims side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| claims (this skill) | 0 | 6mo | Review | Intermediate |
| agent-security-manager | 3 | 6mo | No flags | Advanced |
| security-auditor | 5 | 4mo | No flags | Advanced |
| hunt-blueprint-generation | 1 | 7mo | No flags | Intermediate |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by ruvnet
View all by ruvnet →You might also like
agent-security-manager
ruvnet
Agent skill for security-manager - invoke with $agent-security-manager
security-auditor
sickn33
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
hunt-blueprint-generation
OTRF
Assemble a complete hunt blueprint by consolidating outputs from prior hunt planning skills into a single, structured plan for execution. Use this skill after system and tradecraft research, hunt focus definition, data source identification, and analytics generation have been completed. This skill is synthesis and packaging only and must not introduce new research, assumptions, or analytics.
cosmos-vulnerability-scanner
trailofbits
Scans Cosmos SDK blockchains for 9 consensus-critical vulnerabilities including non-determinism, incorrect signers, ABCI panics, and rounding errors. Use when auditing Cosmos chains or CosmWasm contracts.
openrouter-data-privacy
jeremylongshore
Implement data privacy controls for OpenRouter requests. Use when handling PII or meeting compliance requirements. Trigger with phrases like 'openrouter privacy', 'openrouter pii', 'openrouter gdpr', 'openrouter data protection'.
prompt-guard
Orchestra-Research
Meta's 86M prompt injection and jailbreak detector. Filters malicious prompts and third-party data for LLM apps. 99%+ TPR, <1% FPR. Fast (<2ms GPU). Multilingual (8 languages). Deploy with HuggingFace or batch processing for RAG security.