How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

implementing-privileged-access-workstation - Skill

Name: implementing-privileged-access-workstation
Author: mukul975

Imported from mukul975/anthropic-cybersecurity-skills (skills/implementing-privileged-access-workstation/SKILL.md). Install upstream with npx skills add mukul975/anthropic-cybersecurity-skills --skill implementing-privileged-access-workstation. Copyright stays with the author (Apache-2.0).

Implementing Privileged Access Workstation

Overview

A Privileged Access Workstation (PAW) is a hardened device dedicated to performing sensitive administrative tasks. This skill covers PAW design using the tiered administration model, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with privileged access management (PAM) platforms like CyberArk and BeyondTrust.

When to Use

When deploying or configuring implementing privileged access workstation capabilities in your environment
When establishing security controls aligned to compliance requirements
When building or improving security architecture for this domain
When conducting security assessments that require this implementation

Prerequisites

Windows 10/11 Enterprise with Virtualization Based Security (VBS)
Microsoft Intune or Active Directory Group Policy
CyberArk Privileged Access Security or BeyondTrust Password Safe (optional)
Python 3.9+ with requests, subprocess, json
Administrative access to target endpoints

Steps

Audit current privileged access patterns and identify Tier 0/1/2 assets
Configure device hardening baselines (AppLocker, Credential Guard, Device Guard)
Enforce compliance policies via Intune or GPO
Implement just-in-time access with time-limited admin group membership
Integrate with CyberArk/BeyondTrust for credential vaulting
Validate PAW configuration against CIS and Microsoft PAW guidance
Monitor privileged sessions and generate compliance reports

Expected Output

JSON report listing device compliance status, hardening checks, JIT access windows, and PAM integration verification
Risk scoring per workstation with remediation recommendations

Install implementing-privileged-access-workstation and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "mukul975-anthropic-cybersecurity-skills-implementing-pri-c00e1a", "kind": "skill", "name": "implementing-privileged-access-workstation", "description": "Design and implement Privileged Access Workstations (PAWs) using the tiered administration model, with device hardening, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with PAM platforms like CyberArk or BeyondTrust. Use when hardening admin endpoints, designing a tiered administration model, or securing privileged administrative operations.", "publisher": "mukul975", "version": "1.0.0", "capabilities": { "domains": [ "legal" ], "tags": [ "skill-md", "privileged-access", "paw", "zero-trust", "device-hardening", "cyberark", "beyondtrust", "just-in-time-access", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Design and implement Privileged Access Workstations (PAWs) using the tiered administration model, with device hardening, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with PAM platforms like CyberArk or BeyondTrust. Use when hardening admin endpoints, designing a tiered administration model, or securing privileged administrative operations." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/mukul975/anthropic-cybersecurity-skills", "path": "skills/implementing-privileged-access-workstation/SKILL.md", "ref": "HEAD", "url": "https://github.com/mukul975/anthropic-cybersecurity-skills/blob/HEAD/skills/implementing-privileged-access-workstation/SKILL.md", "key": "mukul975/anthropic-cybersecurity-skills/skills/implementing-privileged-access-workstation/SKILL.md" }, "license": "Apache-2.0" }, "instructions": "# Implementing Privileged Access Workstation\n\n## Overview\n\nA Privileged Access Workstation (PAW) is a hardened device dedicated to performing sensitive administrative tasks. This skill covers PAW design using the tiered administration model, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with privileged access management (PAM) platforms like CyberArk and BeyondTrust.\n\n\n## When to Use\n\n- When deploying or configuring implementing privileged access workstation capabilities in your environment\n- When establishing securit", "cost": { "context_tokens": 447 } }

implementing-privileged-access-workstation

About

Implementing Privileged Access Workstation

Overview

When to Use

Prerequisites

Steps

Expected Output

Install implementing-privileged-access-workstation and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews