Stats
Actions
Tags
From aiup-alfresco
Flags CMIS, Alfresco Query Language, and direct database queries that may bypass ACLs. Suggests SearchService with authority context instead.
How this skill is triggered — by the user, by Claude, or both
Slash command
/aiup-alfresco:permission-aware-query-builderThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Review generated query code for potential ACL bypass issues.
Review generated query code for potential ACL bypass issues.
SearchParameters includes authority context when neededAuthenticationUtil.runAsSystem — flag any query executed inside runAsSystem as a potential security issue unless explicitly justifiedsys_acl / sys_racl — when using Search Enterprise (Elasticsearch), verify that ACL fields are included in the search index configurationfts.alfresco.defaultNamespace setting; warn if queries hardcode node refsFlag each potential ACL bypass with severity (high/medium/low), explanation, and suggested fix.
npx claudepluginhub aborroy/aiup-alfrescoAudits IAM policies, RBAC, ACLs, file permissions, and API authorization for vulnerabilities, privilege escalation paths, and least privilege violations.
Reviews Django and DRF code for access control gaps, IDOR risks, and authorization issues in views, viewsets, ORM queries, and permissions.
Enforces deny-by-default authorization at every resource access point using RBAC or ABAC patterns. Use when implementing access control decisions for APIs, web apps, or services.