Why should I use this skill instead of standard MongoDB queries?

This skill ensures that your application remains secure by preventing developers from accidentally omitting tenant filters, which could lead to unauthorized data access across different communities.

How does this affect database performance?

It improves performance by requiring that all compound indexes start with communityId, ensuring that MongoDB can efficiently partition and query data by tenant.

Does this skill work with aggregation pipelines?

Yes, it enforces that the first stage of every aggregation pipeline must be a $match operation containing the communityId to ensure data is filtered before processing.

Where should the communityId originate from?

The skill strictly mandates that the communityId must come from a verified JWT token or the application's authentication context, never from the request body which can be easily forged by attackers.

Aegis Tenancy Enforcer

Name: Aegis Tenancy Enforcer
Author: muhammadcaeed

bymuhammadcaeed

0•

Gestión de Bases de Datos

Enforces strict multi-tenant data isolation by ensuring every MongoDB operation in the Aegis platform includes a verified community identifier.

The Aegis Tenancy Enforcer is a specialized security skill designed to prevent cross-tenant data leaks in the Aegis community management platform. It provides automated guidance for developers writing MongoDB queries, repository methods, and service logic, mandating that every database interaction—including CRUD operations, aggregation pipelines, and index definitions—includes a communityId derived from secure JWT tokens rather than untrusted request bodies. This ensures that users can only ever access or modify data belonging to their specific community context.

Características Principales

01Prevention of data leaks by banning global queries and optional tenant parameters

02Guideline enforcement for compound indexes with communityId as the lead field

03Mandatory communityId filter enforcement for all MongoDB CRUD operations

04Standardized repository patterns for find, update, and delete methods

050 GitHub stars

06Validation of aggregation pipelines to ensure $match stages include tenant isolation

Casos de Uso

01Reviewing service layer logic to ensure tenant context is passed from JWT tokens

02Implementing secure repository methods for community-specific household data

03Designing database indexes that optimize for multi-tenant query performance

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add muhammadcaeed/aegis tenancy-enforcer.md

For use in Claude.ai and ChatGPT

Características Principales

01Prevention of data leaks by banning global queries and optional tenant parameters

02Guideline enforcement for compound indexes with communityId as the lead field

03Mandatory communityId filter enforcement for all MongoDB CRUD operations

04Standardized repository patterns for find, update, and delete methods

050 GitHub stars

06Validation of aggregation pipelines to ensure $match stages include tenant isolation

Casos de Uso

01Reviewing service layer logic to ensure tenant context is passed from JWT tokens

02Implementing secure repository methods for community-specific household data

03Designing database indexes that optimize for multi-tenant query performance