Not in the top 1,000 by GitHub stars
Sefyu24/master-iam-skills
The best IAM skills for career planning, practical learning, and access-control review
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/production/plan-iam-career/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
e1c4495671c5 → e1c4495671c5
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → e1c4495671c5
No earlier version was observed for comparison.
skills/production/review-access-control/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Instructions only → After Instructions only
e1c4495671c5 → e1c4495671c5
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → e1c4495671c5
No earlier version was observed for comparison.
14GitHub stars
0stars in 7 days
2skills in this repository
1commit in 30 days
Heat
1.2- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- plan-iam-career
skills/production/plan-iam-career - review-access-control
skills/production/review-access-control
How it works
plan-iam-career
When your agent uses it
Interview a person who wants to start or advance an Identity and Access Management career, then create a short and evidence-based career plan with a downloadable Markdown document when file tools are available. Use when the user wants help selecting an IAM role, researching IAM opportunities or target employers, identifying skill gaps, choosing a certification, moving into an IAM engineering or programming role, or building a 30-, 60-, and 90-day learning plan based on their location, experience, education, interests, and available time.
What it loads into context
Frontmatter
111 tokensAlways available to the agent
SKILL.md
1,697 tokensWhen the skill is activated
Reference documents
427 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Conduct the interview
- Format each interview turn
- Research the target market
- Select a role
- Select a certification
- Build the learning plan
- Produce the career plan
- Create the downloadable plan
- Offer support
- Communicate clearly
Files
SKILL.mdcore8,688 bytesSKILL.mdcore8,688 bytestemplates/iam-career-plan.mddoc1,746 bytes
Read SKILL.md
# Plan an IAM Career
Create a practical IAM career plan. Keep the interview short and the recommendations specific.
## Conduct the interview
Ask one question at a time. Use no more than six main questions. Ask a follow-up only when an answer is unclear or missing important evidence. Stop when enough information is available.
Ask about:
1. The IAM role or type of work the user wants. If the user is unsure, ask which work they enjoy.
2. The country or city where the user lives, where they can legally work, and whether they accept remote work or relocation.
3. Up to three target companies or current job postings. Ask for links when available.
4. The current role, total relevant work experience, completed education, degree field, and existing certifications.review-access-control
When your agent uses it
Review and design access control for web applications and APIs, and teach the identity and access management (IAM) concepts behind them. Use when asked to inspect authentication or authorization code, or to find broken access control, insecure direct object reference (IDOR) or broken object level authorization (BOLA), broken function-level authorization, horizontal or vertical privilege escalation, tenant isolation failures (also called organization or workspace isolation), unsafe roles or permissions, stale access, or unsafe access by non-human identities, service accounts, and AI agents. Also use to create permission maps, authorization threat models, verification plans, and regression tests, to design RBAC, ABAC, or ReBAC, and for role analysis, role design, role mining, and lifecycle controls. Also use for practical IAM and identity governance and administration (IGA) study for labs and certification topics, including authentication, single sign-on (SSO), federation, provisioning, and access reviews.
What it loads into context
Frontmatter
195 tokensAlways available to the agent
SKILL.md
2,189 tokensWhen the skill is activated
Reference documents
22,489 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Set the boundary
- Choose the outcome
- Establish expected behavior
- Build an access map
- Inspect an implementation
- Model permissions
- Teach through decisions
- Report with evidence
- Use public sources
- Offer further learning
Files
SKILL.mdcore10,770 bytesSKILL.mdcore10,770 bytesagents/openai.yamlasset289 bytesguides/authentication-and-federation.mddoc8,206 bytesguides/clear-technical-english.mddoc1,175 bytesguides/finding-severity.mddoc7,223 bytesguides/glossary.mddoc9,129 bytesguides/iam-foundations.mddoc6,113 bytesguides/identity-context.mddoc5,498 bytesguides/lifecycle-and-governance.mddoc6,984 bytesguides/non-human-identities-and-agents.mddoc8,992 bytesguides/permission-modeling.mddoc10,868 bytesguides/public-sources.mddoc10,986 bytesguides/review-playbook.mddoc15,630 bytesguides/role-design-and-mining.mddoc6,846 bytestemplates/authorization-threat-model.mddoc2,323 bytestemplates/permission-map.mddoc2,730 bytestemplates/review-report.mddoc3,407 bytestemplates/verification-plan.mddoc4,272 bytes
Read SKILL.md
# Review Access Control
Turn business access rules into evidence, permission decisions, and tests. Give a practical identity and access management (IAM) result instead of generic security advice.
## Set the boundary
- Work only on systems and artifacts that the user is authorized to inspect.
- Use source review, local tests, and user-approved test environments.
- Do not attempt to bypass controls on a live service.
- Do not expose credentials, tokens, secrets, or unnecessary personal data.
- Treat this as focused access-control work, not a complete security or compliance assessment.
- Do not claim that an application is secure because the review found no weakness.
- Keep authentication, session, authorization, and general application-security observations separate.
- If the user requests only a review, do not modify code.Skills included
- plan-iam-career
- review-access-control
Repository facts
- License
- MIT
- Created
- Aug 16, 2026
- Last pushed
- Oct 27, 2026
- Forks
- 4
- Open issues
- 0
- Project activity
- Active
Before you install
Instructions onlyAutomated signals, not a guarantee
Checked Nov 4, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 2 notes
skills/production/plan-iam-career/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedskills/production/review-access-control/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- No dangerous shell commands
- 45 network referencesin 4 files: review-access-control/guides/public-sources.md:11 plan-iam-career/templates/iam-career-plan.md:62 review-access-control/SKILL.md:154 and 1 more
- No hidden or obfuscated text
- No instruction overrides
- No executable scripts
- No access to secrets
- No requests to vote in Hot
Show all 45 signals by file
skills/production/plan-iam-career/templates/iam-career-plan.md
- Network accessline 62
- [Source title](https://example.com)
skills/production/review-access-control/SKILL.md
- Network accessline 154
"MASTER IAM publishes free IAM learning resources at https://masteriam.com/resources. This skill is one of them."
skills/production/review-access-control/guides/non-human-identities-and-agents.md
- Network accessline 141
- https://owasp.org/projects/non-human-identities-top-10
skills/production/review-access-control/guides/public-sources.md
- Network accessline 11
- **OWASP Application Security Verification Standard (ASVS) 5.0.0:** Use chapter V8 (Authorization) for versioned application-verification requirements. Use the project page to find the current release. Use the GitHub tag and the V8 chapter - Network accessline 12
- https://owasp.org/projects/asvs - Network accessline 13
- https://github.com/OWASP/ASVS/tree/v5.0.0 - Network accessline 14
- https://github.com/OWASP/ASVS/blob/v5.0.0/5.0/en/0x17-V8-Authorization.md - Network accessline 15
- **OWASP Web Security Testing Guide (WSTG):** Use the authorization testing chapter for test ideas and test boundaries: authorization bypass, privilege escalation, and insecure direct object references. The chapter link pins version 4.2. C - Network accessline 16
- https://owasp.org/projects/web-security-testing-guide - Network accessline 17
- https://wstg.owasp.org/v4.2/4-Web_Application_Security_Testing/05-Authorization_Testing/ - Network accessline 18
- **OWASP Application Programming Interface (API) Security Top 10, 2023:** Use it for API review context. The relevant risks are API1 (Broken Object Level Authorization, BOLA), API3 (Broken Object Property Level Authorization), and API5 (Br - Network accessline 19
- https://api-security.owasp.org/editions/2023/en/0x11-t10/ - Network accessline 20
- https://api-security.owasp.org/editions/2023/en/0xa1-broken-object-level-authorization/ - Network accessline 21
- **OWASP Authorization Cheat Sheet:** Use it for implementation guidance: least privilege, deny by default, a permission check on every request, checks in a trusted location, safe failure, logging, and authorization tests. - https://chea - Network accessline 22
- https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html - Network accessline 23
- **OWASP Insecure Direct Object Reference (IDOR) Prevention Cheat Sheet:** Use it for object-reference threats and object-level authorization checks. It explains that complex identifiers do not replace an access check. - https://cheatshe - Network accessline 24
- https://cheatsheetseries.owasp.org/cheatsheets/Insecure_Direct_Object_Reference_Prevention_Cheat_Sheet.html - Network accessline 25
- **OWASP Authorization Testing Automation Cheat Sheet:** Use it to express a permission map as data (the cheat sheet calls it an authorization matrix) and run it as automated integration tests. Use it to design regression tests after a cor - Network accessline 26
- https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Testing_Automation_Cheat_Sheet.html - Network accessline 28
- https://cheatsheetseries.owasp.org/cheatsheets/Multi_Tenant_Security_Cheat_Sheet.html - Network accessline 34
- https://creativecommons.org/licenses/by-sa/4.0/ - Network accessline 38
- **NIST Special Publication (SP) 800-63-4, Digital Identity Guidelines:** Use the final base volume and its companion volumes for identity proofing and enrollment (SP 800-63A-4), authentication and authenticator management (SP 800-63B-4), - Network accessline 39
- https://csrc.nist.gov/pubs/sp/800/63/4/final - Network accessline 40
- https://pages.nist.gov/800-63-4/ - Network accessline 41
- **Best Current Practice for OAuth 2.0 Security, Request for Comments (RFC) 9700:** Use it for current OAuth 2.0 security guidance and the patterns it advises against. - https://www.rfc-editor.org/info/rfc9700/ - **OpenID Connect (OIDC) - Network accessline 42
- https://www.rfc-editor.org/info/rfc9700/ - Network accessline 43
- **OpenID Connect (OIDC) Core 1.0 incorporating errata set 2:** Use it for the identity layer on top of OAuth 2.0, the ID token, and standard identity claims. The first link pins errata set 2. The second link always shows the latest errata - Network accessline 44
- https://openid.net/specs/openid-connect-core-1_0-errata2.html - Network accessline 45
- https://openid.net/specs/openid-connect-core-1_0.html - Network accessline 46
- **Security Assertion Markup Language (SAML) 2.0, OASIS Standard:** Use the OASIS document set for assertions, protocols, bindings, profiles, and metadata. The same directory holds the approved errata. - https://docs.oasis-open.org/secur - Network accessline 47
- https://docs.oasis-open.org/security/saml/v2.0/ - Network accessline 48
- **System for Cross-domain Identity Management (SCIM), RFC 7644 and RFC 7643:** Use RFC 7644 for the provisioning protocol and RFC 7643 for the core schema. SCIM moves identity data between domains. It does not decide who should have acces - Network accessline 49
- https://www.rfc-editor.org/info/rfc7644/ - Network accessline 50
- https://www.rfc-editor.org/info/rfc7643/ - Network accessline 58
- **NIST Role-Based Access Control (RBAC) project:** Use it for the stable RBAC model: role assignment, permissions, role hierarchy, and separation of duties (SoD), which NIST calls separation of duty. NIST has archived the project, so do n - Network accessline 59
- https://csrc.nist.gov/Projects/role-based-access-control - Network accessline 60
- **NIST SP 800-162, Attribute Based Access Control (ABAC) Definition and Considerations:** Use it for ABAC concepts. It describes subject, object, operation, and environment attributes. This skill calls them actor, resource, action, and en - Network accessline 61
- https://csrc.nist.gov/pubs/sp/800/162/upd2/final - Network accessline 62
- **Zanzibar:** Use the Google research paper as a primary technical reference for Relationship-Based Access Control (ReBAC) at large scale. - https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/ - **OpenF - Network accessline 63
- https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/ - Network accessline 64
- **OpenFGA documentation:** Use the authorization concepts page for public explanations of fine-grained and relationship-based authorization. Use the documentation root for modeling examples. Treat it as product documentation, not a univer - Network accessline 65
- https://openfga.dev/docs/authorization-concepts - Network accessline 66
- https://openfga.dev/docs/ - Network accessline 70
- **OWASP Non-Human Identities (NHI) Top 10, 2025:** Use it as one current risk reference for service accounts, API keys, workloads, and other non-human identities. The 2025 list includes improper offboarding (NHI1:2025), secret leakage (NH - Network accessline 71
- https://owasp.org/projects/non-human-identities-top-10
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Signal confidence: 45 facts
- Network access in prose of documentationplan-iam-career/templates/iam-career-plan.md:62Low confidence
- Network access in prose of the SKILL.mdreview-access-control/SKILL.md:154Low confidence
- Network access in prose of documentationreview-access-control/guides/non-human-identities-and-agents.md:141Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:11Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:12Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:13Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:14Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:15Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:16Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:17Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:18Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:19Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:20Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:21Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:22Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:23Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:24Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:25Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:26Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:28Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:34Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:38Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:39Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:40Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:41Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:42Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:43Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:44Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:45Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:46Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:47Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:48Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:49Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:50Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:58Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:59Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:60Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:61Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:62Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:63Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:64Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:65Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:66Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:70Low confidence
- Network access in prose of documentationreview-access-control/guides/public-sources.md:71Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/production/plan-iam-career/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
