Does this skill perform automated testing?

Yes, it guides the user to run npm typechecks and targeted Vitest or Playwright tests to validate that the security fixes are functional and don't break the app.

What is the primary goal of the workspace-isolation-audit skill?

The primary goal is to ensure multi-tenant data isolation by enforcing mandatory workspace_id filtering on all applicable database queries.

Which database platforms does this skill support?

This skill is specifically designed for applications using Supabase and its JavaScript/TypeScript client library.

How does it handle API route validation?

It checks that API routes read workspace IDs from request parameters and validates them using secure helper functions like validateUserAndWorkspace.

Workspace Isolation Auditor

Name: Workspace Isolation Auditor
Author: CleanExpo

byCleanExpo

•

Seguridad y Pruebas

Audits and secures Supabase queries to ensure strict multi-tenant data isolation via mandatory workspace filtering.

Acerca de

The Workspace Isolation Auditor skill helps developers maintain robust security within multi-tenant applications by systematically auditing and fixing Supabase queries. It scans your codebase for missing workspace identifiers, validates user access contexts across Next.js API routes and background agents, and implements hardened filtering logic to prevent unauthorized cross-tenant data access. By enforcing the use of workspace_id in every database interaction, it ensures your SaaS or CRM environment remains compliant and secure.

Características Principales

1 GitHub stars
Validation of workspace context in API routes and agent tasks
Integration with Vitest and Playwright for regression testing
Refactoring of server helpers to accept explicit workspace IDs
Automated detection of missing workspace filters in Supabase queries
Targeted code hardening for multi-tenant data privacy

Casos de Uso

Securing new API routes to prevent cross-tenant data leaks
Auditing existing repositories for database query vulnerabilities
Standardizing tenant-access logic across complex backend agents

Acerca de

Características Principales

1 GitHub stars
Validation of workspace context in API routes and agent tasks
Integration with Vitest and Playwright for regression testing
Refactoring of server helpers to accept explicit workspace IDs
Automated detection of missing workspace filters in Supabase queries
Targeted code hardening for multi-tenant data privacy

Casos de Uso

Securing new API routes to prevent cross-tenant data leaks
Auditing existing repositories for database query vulnerabilities
Standardizing tenant-access logic across complex backend agents