cross-tenant-data-leak-tests
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused documentation and template repository. It correctly identifies and warns against high-risk practices such as testing Row-Level Security (RLS) using superuser or privileged database roles.
- [SAFE]: Data handling follows security best practices. The provided GitHub Actions CI templates utilize the
secretscontext (secrets.CI_DB_PASSWORD) for database credentials, preventing hardcoded secret exposure. - [SAFE]: The skill provides numerous 'negative' test cases (e.g., attempting to read or update records across tenant boundaries) designed to verify that the target application's security controls are functioning correctly.
- [SAFE]: Documentation includes references to authoritative sources such as OWASP, AWS Well-Architected Framework, and official database documentation (PostgreSQL, CockroachDB, SQL Server).
Audit Metadata