Does this skill perform automated testing?

Yes, it guides the user to run npm typechecks and targeted Vitest or Playwright tests to validate that the security fixes are functional and don't break the app.

What is the primary goal of the workspace-isolation-audit skill?

The primary goal is to ensure multi-tenant data isolation by enforcing mandatory workspace_id filtering on all applicable database queries.

Which database platforms does this skill support?

This skill is specifically designed for applications using Supabase and its JavaScript/TypeScript client library.

How does it handle API route validation?

It checks that API routes read workspace IDs from request parameters and validates them using secure helper functions like validateUserAndWorkspace.

Workspace Isolation Auditor

Name: Workspace Isolation Auditor
Author: CleanExpo

byCleanExpo

•

Seguridad y Pruebas

Audits and secures Supabase queries to ensure strict multi-tenant data isolation via mandatory workspace filtering.

The Workspace Isolation Auditor skill helps developers maintain robust security within multi-tenant applications by systematically auditing and fixing Supabase queries. It scans your codebase for missing workspace identifiers, validates user access contexts across Next.js API routes and background agents, and implements hardened filtering logic to prevent unauthorized cross-tenant data access. By enforcing the use of workspace_id in every database interaction, it ensures your SaaS or CRM environment remains compliant and secure.

Características Principales

011 GitHub stars

02Validation of workspace context in API routes and agent tasks

03Integration with Vitest and Playwright for regression testing

04Refactoring of server helpers to accept explicit workspace IDs

05Automated detection of missing workspace filters in Supabase queries

06Targeted code hardening for multi-tenant data privacy

Casos de Uso

01Securing new API routes to prevent cross-tenant data leaks

02Auditing existing repositories for database query vulnerabilities

03Standardizing tenant-access logic across complex backend agents

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add cleanexpo/unite-hub workspace-isolation-audit

For use in Claude.ai and ChatGPT

Download Skill