1. Habit
  2. Skills
  3. Tigris Security Access Control skill
tigrisdata · 3K installs

Tigris Security Access Control skill
Runs by itself, monthly storage security audit.

Storage keys and CORS stay tight.

Install the Tigris Security Access Control skill and make it a habit: follow https://gethabit.dev/skills/tigrisdata/tigris-security-access-control.md

  1. 1Copy
  2. 2Paste into Claude Code, Codex or Cursor
  3. 3It runs by itself

3K installs2 starsMIT licenceSource on GitHub ↗

Tigris Security Access Control

by tigrisdata · 3K installs

The skill

The tigris security access control skill covers access key lifecycle, bucket roles, CORS rules, public and private buckets, presigned URL safety and a security audit checklist for Tigris object storage.

Only when you ask.

The habit

Storage keys and CORS stay tight.

↻ Runs by itselfmonthly storage security audit

How the habit works.
You don't have to.

Three questionsWhen does it start? How does it check its work? What does it remember?

01

It starts by itself

monthly storage security audit. Runs in cron or Claude Code routine.

  • ↻ monthly storage security audit
  • 0 9 1 * *

02

It checks its work

audit checklist + your OK. If a check fails, it tells you.

  • ✓search for tid_ and tsec_ in the repo finds zero matches
  • ✓.env is listed in .gitignore
  • ✓tigris buckets cors get shows no "*" origin with PUT or DELETE
  • ✓every key in tigris access-keys list is assigned to a bucket

03

It remembers

security audit log. The next run reads it first: keys, roles and CORS rules from the last audit and open findings.

loops/tigris-security-audit-loop/log.md

One run, step by step.
Then it stops.

Stop ruleOne audit per run, no key deleted without your OK.

  1. 01

    Read last audit

    Open the log for the last key list, CORS rules and open findings.

  2. 02

    Scan for secrets

    Search the repo for tid_ and tsec_ and confirm .env is in .gitignore.

  3. 03

    Review access keys

    Run tigris access-keys list and tigris access-keys info to check bucket scope and roles.

  4. 04

    Review CORS rules

    Run tigris buckets cors get for each bucket and flag wildcard origins with write methods.

  5. 05

    Check presigned expiry

    Look for presigned URLs in code with expiresIn above one hour.

  6. 06

    Ask before revoking

    List stale or over-scoped keys and ask you before running tigris access-keys delete.

  7. 07

    Log the audit

    Write findings, fixes and keys due for rotation into the log.

What it may do.
Nothing more.

Safe by defaultIt writes only in its own folder and asks you before anything goes out.

Is it for you?
Use it when it fits.

Quick checkRead both lists. If the left one sounds like you, the Tigris Security Access Control skill helps.

Use it when

  • ✓ you rotate access keys
  • ✓ browser uploads fail on CORS
  • ✓ you audit storage security

Skip it when

  • – you only upload files
  • – you use another storage provider

Questions

Tigris Security Access Control skill, answered.

How does key rotation avoid downtime?

Create and assign the new key, deploy it, verify the app, then revoke the old key.

What if a key leaked into git?

Revoke it at once, create a replacement, update deployments and audit recent bucket access.

Is a wildcard CORS origin ever fine?

Only for public read-only content with GET, never with PUT or DELETE.

How do I install the Tigris Security Access Control skill?

Copy the prompt at the top into your agent. It installs the skill from tigrisdata/skills and sets up the habit. Or run npx skills add tigrisdata/skills --skill tigris-security-access-control.

Is the Tigris Security Access Control skill free?

Yes. It is published under MIT. Habit is free too.

Tigris Security Access Control. Now as a habit.

Install the Tigris Security Access Control skill and make it a habit: follow https://gethabit.dev/skills/tigrisdata/tigris-security-access-control.md

  • Free
  • No account
  • Undo in one line

All tigrisdata skills →More ops skills →

Works in

  • Claude Code
  • Codex
  • Cursor
  • ChatGPT
  • Claude app

Made by tigrisdata, published under MIT. Habit links to the original and never changes it. Is this your skill?

Copying didn't work here. Select the line and copy it by hand.