OpenFGA is an open-source relationship-based access control (ReBAC) engine based on Google's Zanzibar, designed for building fine-grained permissions.

Does this skill handle complex role hierarchies?

Yes, it covers advanced patterns like concentric permissions and indirect relationship definitions (X from Y) to model complex organizational access.

Which SDKs are supported by this skill?

The skill includes specific implementation rules and best practices for JavaScript/TypeScript, Go, Python, Java, and .NET SDKs.

How does this skill help with authorization testing?

It provides standardized patterns for .fga.yaml files, enabling you to write assertions that verify check results, list objects, and list users for your model.

OpenFGA Authorization Modeling

Name: OpenFGA Authorization Modeling
Author: openfga

byopenfga

Security & Testing

Guides the design, testing, and implementation of scalable relationship-based access control using OpenFGA best practices.

About

The OpenFGA skill empowers developers to build secure and efficient fine-grained access control (ReBAC) systems by providing domain-specific guidance on authorization modeling. It covers everything from core schema definitions and relationship patterns to complex hierarchical access and custom role implementations. Whether you are authoring .fga models, writing relationship tuples, or integrating OpenFGA SDKs into your backend, this skill ensures your authorization logic is optimized, testable, and follows industry-standard security patterns.

Key Features

Structured testing patterns using .fga.yaml files and check assertions
Comprehensive guidance for OpenFGA schema 1.1 and relationship modeling
0 GitHub stars
Optimization strategies for reducing tuple counts and simplifying access logic
Best practices for defining direct, concentric, and indirect relationships
Multi-language SDK integration for JS, Go, Python, Java, and .NET

Use Cases

Automating the validation of complex authorization rules during the CI/CD process
Refactoring legacy permission logic into a centralized relationship-based model
Designing a multi-tenant authorization system with hierarchical resource access

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add openfga/agent-skills openfga

For use in Claude.ai and ChatGPT

Download Skill

GitHub