multi-tenant-saas-architecture
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and reference documents provide high-quality guidance for multi-tenant architecture, specifically emphasizing the prevention of cross-tenant data leakage and unauthorized access.
- [SAFE]: Technical templates for database schemas, RBAC (Role-Based Access Control) models, and JWT (JSON Web Token) handling are provided as static documentation and do not involve any executable or remote code components.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The skill adheres to its stated purpose of assisting with system design and security hardening.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection by ingesting architecture plans and production data for analysis.
- Ingestion points: Inputs such as 'Current architecture, plans, policies' and 'Production data' are processed from the agent's context (SKILL.md).
- Boundary markers: The skill lacks explicit input delimiters but contains strong instructional constraints to 'Default to read-only analysis' and 'Never expose secrets'.
- Capability inventory: The skill's capabilities are limited to producing text-based architectural documentation; it does not contain subprocess execution, file-writing to system paths, or network operations.
- Sanitization: The skill itself instructs the agent on how to implement sanitization (e.g., prepared statements) in the SaaS systems being designed, although it does not implement its own input filtering logic.
Audit Metadata