Can this skill identify soft-delete issues?

Yes, it specifically audits for soft-delete patterns such as 'deleted_at' columns to ensure that hidden data is correctly excluded from standard queries.

Does it provide actionable diagnostic information?

Yes, the skill can run RLS diagnostic scripts and provide a summarized report of findings, making it easy to fix configuration gaps.

What is RLS in the context of this skill?

RLS stands for Row Level Security, a database feature used to control which users can access or modify specific rows of data, which is essential for multi-tenant applications.

Is this skill specific to a certain database tool?

While it uses patterns common in Supabase and PostgreSQL, the principles of RLS auditing and multi-tenant scoping apply to most modern relational database architectures.

How does this skill improve multi-tenant security?

It checks that data access is correctly scoped by company or user IDs and ensures administrative clients are used only when necessary and with proper filters.

RLS Audit & Multi-tenant Safety

Name: RLS Audit & Multi-tenant Safety
Author: Jelidia

byJelidia

0•

セキュリティとテスト

Audits Row Level Security (RLS) configurations and ensures multi-tenant data isolation for secure server-side access.

The RLS Audit skill provides automated checks and domain-specific guidance for maintaining robust data security in multi-tenant applications. It focuses on validating Row Level Security (RLS) enforcement, ensuring that user-authenticated clients are prioritized over administrative clients, and verifying that any required admin actions remain strictly scoped by tenant identifiers like company_id. By auditing soft-delete patterns and utilizing diagnostic scripts, it helps developers identify potential data leaks and maintain high standards for database integrity and privacy within Claude Code.

主な機能

01Summarizes multi-tenant safety findings for security reviews

02Validates RLS enforcement via createUserClient patterns

03Executes RLS diagnostic scripts to identify security gaps

040 GitHub stars

05Audits createAdminClient usage for proper tenant scoping

06Verifies implementation of soft-delete patterns like deleted_at

ユースケース

01Troubleshooting unauthorized data access issues using diagnostic scripts

02Performing a security audit of a multi-tenant backend before production deployment

03Standardizing data deletion policies and soft-delete logic across database tables

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jelidia/entretien-prestige rls-audit

For use in Claude.ai and ChatGPT

Download Skill