manage-security SKILL.md skillA

manage-security from mendixlabs/mxcli is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add mendixlabs/mxcli/manage-security@git:20261101.3bf444a

Pins git:20261101.3bf444a in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
mendixlabs/mxcli
Path
.claude/skills/mendix/manage-security/SKILL.md
Versions recorded
20
Latest version
git:20261101.3bf444a, committed Nov 1, 2026
First version recorded
Aug 28, 2026
Size
28,894 bytes
Repository stars
137
License
Apache-2.0

Configure Mendix security in MDL — module and user roles, access to microflows, pages and entities, project security level, demo users, and guest access. Use when setting up or changing who can see or do what in an app.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

<!-- skill-index: generated by scripts/skill-index.py; make check-skill-index -->
## Find it fast

`sed -n '<from>,<to>p' SKILL.md` one section rather than reading the file;
`./mxcli syntax <topic>` answers *how do I write this* for a fraction of either.

| lines | section |
|---|---|
| 27-35 | When to Use This Skill |
| 36-43 | Security Concepts |
| 44-120 | The System-module ceiling — decide the role model around this FIRST |
| 121-560 | Syntax Reference |
| 561-575 | Starlark Lint Rule APIs |
| 576-637 | Common Workflow: Setting Up Module Security |
| 638-647 | Common Mistakes |
| 648-657 | Validation |

<!-- /skill-index -->
# Security Management Skill

This skill covers Mendix security configuration via MDL: module roles, user roles, access control (microflows, pages, entities), project security settings, and demo users.

## When to Use This Skill

Use when the user asks to:
- Set up security for a module or project
- Create or manage module roles / user roles
- Grant or revoke access to microflows, pages, or entities
- Configure project security level or demo users
- Review existing security configuration

## Security Concepts
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add mendixlabs/mxcli/manage-security@sha256:91a423feb71928f4

The line at the top of this page pins the label git:20261101.3bf444a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_bgwpvj7ccfhsxafp.svg)](https://markdownregistry.com/a/art_bgwpvj7ccfhsxafp)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 20 versions of this file, between Aug 28, 2026 and Nov 1, 2026, about one every 3 days.

versioncommittedcommitsizeaudit
git:20261101.3bf444a latest2026-11-01 3bf444a 28,894 BA view · diff
git:20261028.68e0d382026-10-28 68e0d38 28,229 BA view · diff
git:20261027.cf9d5f02026-10-27 cf9d5f0 28,060 BA view · diff
git:20261017.257bf882026-10-17 257bf88 27,734 BA view · diff
git:20261015.fb0cec92026-10-15 fb0cec9 27,592 BA view · diff
git:20261013.cbd9e542026-10-13 cbd9e54 27,226 BA view · diff
git:20261012.1c8326f2026-10-12 1c8326f 27,459 BA view · diff
git:20261010.50fe33a2026-10-10 50fe33a 26,743 BA view · diff
git:20261008.41ce03c2026-10-08 41ce03c 26,105 BA view · diff
git:20261002.9e67ec82026-10-02 9e67ec8 25,956 BA view · diff
git:20261001.3a9ec832026-10-01 3a9ec83 24,005 BA view · diff
git:20260929.a07a9012026-09-29 a07a901 23,818 BA view · diff
git:20260928.52fc4c92026-09-28 52fc4c9 23,782 BA view · diff
git:20260928.958e51c2026-09-28 958e51c 23,664 BA view · diff
git:20260922.0a5b9a32026-09-22 0a5b9a3 22,257 BA view · diff
git:20260911.1daafa82026-09-11 1daafa8 19,992 BA view · diff
git:20260909.e2d92f22026-09-09 e2d92f2 19,391 BA view · diff
git:20260909.d2f67192026-09-09 d2f6719 18,554 BA view · diff
git:20260905.7c6b9062026-09-05 7c6b906 18,014 BA view · diff
git:20260828.90390112026-08-28 9039011 16,658 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (28894 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

mendixlabs/mxcli · 137 stars · license Apache-2.0 · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_bgwpvj7ccfhsxafp
GET https://markdownregistry.com/api/v1/resolve?ref=mendixlabs/mxcli/manage-security
GET https://markdownregistry.com/api/v1/blob/91a423feb71928f41194abc6fedd495fbcb3701cdcc1584aba41467da82c26f5

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from mendixlabs/mxcli

issue-triage SKILL.md skill
mendixlabs/mxcli · .claude/skills/issue-triage/SKILL.md · Cluster and classify the open issues in the ako/mxcli fork, both the mendixlabs/mxcli issues mirrored into it and the…
git:20261106.37b0fe6 · audit A · 137 stars
agents SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/agents/SKILL.md · Author Mendix AI agent documents in MDL — Model, Knowledge Base, Consumed MCP Service and Agent, with variables, tools…
git:20261010.50fe33a · audit A · 137 stars
alter-page SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/alter-page/SKILL.md · Modify an existing page or snippet's widget tree in place with ALTER PAGE / ALTER SNIPPET — SET, INSERT, DROP, REPLACE…
git:20261102.69cffcc · audit A · 137 stars
analyze-runtime SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/analyze-runtime/SKILL.md · Find out what a running Mendix app actually does — logs, Prometheus metrics, OpenTelemetry traces and the model…
git:20261010.50fe33a · audit B · 137 stars
assess-migration SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/assess-migration/SKILL.md · Investigate an existing non-Mendix application (Java, .NET, Python, Node, PHP, …) and produce a structured migration…
git:20261010.50fe33a · audit A · 137 stars
assess-quality SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/assess-quality/SKILL.md · Audit a Mendix project against best practices for naming, security, performance, maintainability and architecture, and…
git:20261101.da695f0 · audit A · 137 stars
atlas-design SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/atlas-design/SKILL.md · Make a Mendix app look designed rather than default-Atlas: layout, spacing, typography, colour and design properties…
git:20261010.50fe33a · audit A · 137 stars
bootstrap-app SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/bootstrap-app/SKILL.md · Provision a Mendix project in a repo that has none — interview, `mxcli new`, session hook, project brief, first commit…
git:20261104.237ae1e · audit A · 137 stars
browse-integrations SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/browse-integrations/SKILL.md · Discover the external services a project consumes and browse their cached contracts through the MDL CATALOG — OData…
git:20261012.365840a · audit A · 137 stars
bulk-widget-updates SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/bulk-widget-updates/SKILL.md · Discover and bulk-change widget properties across many pages with LIST WIDGETS and UPDATE WIDGETS. Use when the same…
git:20261010.50fe33a · audit A · 137 stars
business-events SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/business-events/SKILL.md · Define event-driven APIs over Kafka with Mendix business event services — publish and subscribe contracts…
git:20261025.b57af11 · audit A · 137 stars
catalog-search SKILL.md skill
mendixlabs/mxcli · .claude/skills/mendix/catalog-search/SKILL.md · Search the Mendix Catalog platform service registry (catalog.mendix.com) from the CLI to find services published across…
git:20261010.50fe33a · audit A · 137 stars

Every file in mendixlabs/mxcli

Browse by kind, by grade A, or by owner.