skills/naodeng/awesome-qa-skills/threat-modeling/Socket

threat-modeling

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly

Anomalyevals/cases/domain-method-success.yaml

LOW

AnomalyLOW

evals/cases/domain-method-success.yaml

The fixture describes a plausible cross-tenant read candidate because an untrusted tenantId is used in a database query without a stated binding to authenticated identity. Enforce server-side tenant binding and validate rejection of cross-tenant requests. The material does not prove implementation behavior or exploitation.

Confidence: 98%Severity: 58%

Audit Metadata

Analyzed At

Oct 14, 2026, 01:45 AM

Package URL

pkg:socket/skills-sh/naodeng%2Fawesome-qa-skills%2Fthreat-modeling%2F@31c07ae1359b7c3e00526ae51f99d79b536633c78f84c2725f1975c14aa3a18f