skills.rest
dthompsonfl
dthompsonflCOMMUNITY
Explore all skills by this author →
GitHub

admin-workflows

Automate secure admin data workflows in Next.js applications.

Updated Dec 26, 2025
Search Tags:#rbac#forms#nextjs#admin#csrf#audit-logging#tenant-isolation
One-click install
npx skills add https://github.com/dthompsonfl/crispy-fishstick --skill admin-workflows-dthompsonfl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: admin-workflows
Source: https://github.com/dthompsonfl/crispy-fishstick/tree/main/.agent/skills/admin-workflows
Command: npx skills add https://github.com/dthompsonfl/crispy-fishstick --skill admin-workflows-dthompsonfl

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Admin workflows in Next.js systems often suffer from security gaps, inconsistent patterns, and maintenance challenges. This Skill provides standardized, enterprise-grade patterns for building secure, scalable admin portals with RBAC, CSRF protection, tenant isolation, and comprehensive audit logging.

Core Features & Use Cases

  • Admin API patterns: centralized helpers for read/write operations with built-in RBAC, CSRF protection, and tenant scoping.
  • Secure forms & UX: form handling with validation, permission gating, and CSRF-aware submissions.
  • Audit & compliance: automated, redacted audit trails for privileged mutations and events.
  • Multi-step workflows: structured, progressive validation for complex admin operations such as contract or user provisioning.

Quick Start

Create a basic admin CRUD workflow by wiring a GET route with adminRead and a POST route with adminMutation, including tenant-scoped data access and an audit logging step.

Frequently Asked Questions about admin-workflows

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build secure admin CRUD APIs in Next.js with RBAC and tenant isolation?▼

Secure admin CRUD APIs in Next.js are built using standardized adminRead and adminMutation helpers that enforce role-based access control, tenant scoping, and input validation to maintain data integrity across multi-tenant portals.

What is the best way to add audit logging to privileged admin mutations?▼

Audit logging for privileged admin mutations is implemented through automated audit hooks attached to adminMutation helpers, generating redacted audit trails that track secure events and ensure compliance for enterprise workflows.

How do I protect Next.js admin forms against CSRF attacks?▼

Protect Next.js admin forms against CSRF attacks by utilizing centralized admin workflow helpers that enforce CSRF-aware submissions, permission gating, and structured validation for secure form handling.

Can I use these admin workflow patterns for complex multi-step user provisioning?▼

Yes, these admin workflow patterns support complex multi-step operations like user provisioning by applying structured, progressive validation across each step to ensure secure and maintainable data processing.

Does this approach require specific dependencies to implement tenant isolation?▼

No external dependencies are required to implement tenant isolation, as the approach relies entirely on standardized internal adminRead and adminMutation helpers to enforce tenant-scoped data access within Next.js.

Related Skills

Explore More Software Engineering Skills→
awudevelopawudevelop

authhub

Configure multi-tenant authentication and organization management for Supabase applications.

Community
Advanced
lloydchanglloydchang
2

audit-security-events

Audit multi-cloud security events and generate compliance reports.

Community
Advanced
rbaumierrbaumier
4

security-defensive

Audit code, configurations, and deployments for security best practices.

Community
Advanced
secondskysecondsky
204

access-control-rbac

Implement RBAC/ABAC policies for Node.js, Python, and Java Spring Security.

Community
Advanced