Does this skill apply to MongoDB aggregation pipelines?

Yes, it requires that the very first stage of any aggregation pipeline must be a $match stage containing the communityId filter.

Can I provide the communityId via the request body?

No, this is considered an anti-pattern. The skill enforces extracting the communityId from the authenticated JWT token to prevent attackers from forging the ID.

Why is communityId required in every database query?

It ensures strict data isolation, preventing users from one community from inadvertently or maliciously accessing data belonging to another community.

How does this skill handle MongoDB indexes?

It mandates that all compound indexes must have communityId as the first field to ensure query efficiency and logical data isolation.

Aegis Tenancy Enforcer

Name: Aegis Tenancy Enforcer
Author: muhammadcaeed

bymuhammadcaeed

0•

데이터베이스 관리

Enforces strict multi-tenant data isolation by ensuring communityId filters are consistently applied across all MongoDB queries and service logic.

The Aegis Tenancy Enforcer is a specialized security skill designed to prevent cross-tenant data leaks within the Aegis community platform. It provides Claude with rigorous architectural guidelines for implementing MongoDB queries, repository patterns, and service layer logic, mandating that every database operation includes a validated communityId. By shifting the source of truth to JWT context rather than request bodies and enforcing specific compound index patterns, this skill ensures that multi-tenancy is a first-class citizen in the codebase, significantly reducing the risk of unauthorized data access.

주요 기능

010 GitHub stars

02Strict validation for aggregation pipelines using $match as the first stage

03Mandatory communityId filtering for all MongoDB CRUD operations

04Secure context extraction from JWT tokens instead of request bodies

05Optimized compound index patterns with communityId as the prefix

06Standardized repository method patterns for consistent tenant isolation

사용 사례

01Designing database schemas and indexes for multi-tenant isolation

02Securing repository methods against cross-community data breaches

03Refactoring service logic to follow strict JWT-based tenant extraction

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add muhammadcaeed/aegis tenancy-enforcer.md

For use in Claude.ai and ChatGPT

주요 기능

010 GitHub stars

02Strict validation for aggregation pipelines using $match as the first stage

03Mandatory communityId filtering for all MongoDB CRUD operations

04Secure context extraction from JWT tokens instead of request bodies

05Optimized compound index patterns with communityId as the prefix

06Standardized repository method patterns for consistent tenant isolation

사용 사례

01Designing database schemas and indexes for multi-tenant isolation

02Securing repository methods against cross-community data breaches

03Refactoring service logic to follow strict JWT-based tenant extraction

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add muhammadcaeed/aegis tenancy-enforcer.md

For use in Claude.ai and ChatGPT