saas-multi-tenant
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural patterns and implementation guides for data isolation in multi-tenant systems. It focuses on preventing cross-tenant data leakage through multiple layers of defense.
- [COMMAND_EXECUTION]: Code examples demonstrate standard database interactions using SQL and TypeScript. These are intended for implementation within a user's application and do not involve unauthorized system commands.
- [DATA_EXFILTRATION]: The content specifically addresses preventing data leaks. It instructs the user to use UUIDs instead of sequential IDs to prevent resource enumeration and mandates tenant filtering at both the application and database (RLS) levels.
- [PRIVILEGE_ESCALATION]: While the skill mentions bypassing Row-Level Security (RLS) for admin functions, it correctly identifies this as a high-risk operation and provides necessary security context, such as requiring separate authentication flows and least-privilege database roles.
Audit Metadata