A straightforward claims-based authorization system for managing permissions across multiple agents. You get seven claim types (read, write, execute, spawn, memory, network, admin) that you can grant, revoke, check, and list via CLI commands. The scope patterns are flexible enough to lock things down to specific files or namespaces, which matters when you're coordinating multiple agents and don't want everything having admin access to everything else. It's built around least privilege principles with predefined security levels from minimal to admin. If you're running agents that need different permission boundaries or you're building any kind of multi-agent workflow where access control actually matters, this gives you the authorization layer to make that happen.

skills.sh installs
1.1K
GitHub stars
81.4K
last updated
Aug 21, 2026

Install

$ npx -y skills add ruvnet/ruflo --skill claims --agent claude-code

Installs into .claude/skills of the current project.

Files

Claims Authorization Skill

Purpose

Claims-based authorization for secure agent operations and access control.

Claim Types

ClaimDescription
readRead file access
writeWrite file access
executeCommand execution
spawnAgent spawning
memoryMemory access
networkNetwork access
adminAdministrative operations

Commands

Check Claim

npx claude-flow claims check --agent agent-123 --claim write

Grant Claim

npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"

Revoke Claim

npx claude-flow claims revoke --agent agent-123 --claim write

List Claims

npx claude-flow claims list --agent agent-123

Scope Patterns

PatternDescription
*All resources
/src/**All files in src
/config/*.tomlTOML files in config
memory:patternsPatterns namespace

Security Levels

LevelClaims
minimalread only
standardread, write, execute
elevated+ spawn, memory
adminall claims

Sponsors

Details

Repository
github.com/ruvnet/ruflo
Categories
Security, AI & Agent Building
First seen
Jun 3, 2026

More from ruvnet/ruflo

All 236

Recommended

More Security
1secondsky avatarsap-btp-best-practicessecondsky/sap-skillsSAP BTP best practices for enterprise architecture, account management, security, and operations, with verification evidence tracked in the repository ledger. U1.1Kskills.sh installs
2orchestra-research avatarprompt-guardorchestra-research/ai-research-skillsMeta's 86M prompt injection and jailbreak detector. Filters malicious prompts and third-party data for LLM apps. 99%+ TPR, <1% FPR. Fast (<2ms GPU). Multilingua1Kskills.sh installs
3adobe avatardispatcheradobe/skillsSingle entry point for all AEM 6.5 LTS Dispatcher skills. Covers config authoring, technical advisory, incident response, performance tuning, security hardening1Kskills.sh installs
4alirezarezvani avatarsenior-secopsalirezarezvani/claude-skillsSenior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices. Runs SAST/DAST scans928skills.sh installs
5secondsky avatarsap-btp-cloud-loggingsecondsky/sap-skillsThis skill provides comprehensive guidance for SAP Cloud Logging service on SAP BTP. Use when setting up Cloud Logging instances, configuring log ingestion from908skills.sh installs
6agentmail-to avataragent-email-patternsagentmail-to/agentmail-skillsArchitecture patterns for AI agents that communicate over email -- why agents need dedicated inboxes rather than human email accounts, infrastructure/provider t903skills.sh installs