claims

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Claims Authorization Skill

声明授权Skill

Purpose

用途

Claims-based authorization for secure agent operations and access control.
基于声明的授权,用于实现安全的Agent操作和访问控制。

Claim Types

声明类型

ClaimDescription
read
Read file access
write
Write file access
execute
Command execution
spawn
Agent spawning
memory
Memory access
network
Network access
admin
Administrative operations
声明描述
read
读取文件权限
write
写入文件权限
execute
命令执行权限
spawn
Agent生成权限
memory
内存访问权限
network
网络访问权限
admin
管理操作权限

Commands

命令

Check Claim

检查声明

bash
npx claude-flow claims check --agent agent-123 --claim write
bash
npx claude-flow claims check --agent agent-123 --claim write

Grant Claim

授予声明

bash
npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"
bash
npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"

Revoke Claim

撤销声明

bash
npx claude-flow claims revoke --agent agent-123 --claim write
bash
npx claude-flow claims revoke --agent agent-123 --claim write

List Claims

列出声明

bash
npx claude-flow claims list --agent agent-123
bash
npx claude-flow claims list --agent agent-123

Scope Patterns

范围模式

PatternDescription
*
All resources
/src/**
All files in src
/config/*.toml
TOML files in config
memory:patterns
Patterns namespace
模式描述
*
所有资源
/src/**
src目录下的所有文件
/config/*.toml
config目录下的TOML文件
memory:patterns
Patterns命名空间

Security Levels

安全等级

LevelClaims
minimal
read only
standard
read, write, execute
elevated
+ spawn, memory
admin
all claims
等级声明
minimal
仅可读
standard
读、写、执行
elevated
额外新增生成、内存权限
admin
所有声明权限

Best Practices

最佳实践

  1. Follow principle of least privilege
  2. Scope claims to specific resources
  3. Audit claim usage regularly
  4. Revoke claims when no longer needed
  1. 遵循最小权限原则
  2. 为声明限定具体资源范围
  3. 定期审计声明使用情况
  4. 不再需要的声明及时撤销