Does this apply to MongoDB aggregation pipelines?

Yes. Every aggregate pipeline must include a $match stage as the very first operation to filter by the specific communityId.

Can I pass the communityId through the request body?

No, this skill forbids trusting the request body for communityId as it can be forged. It must always be sourced from a verified JWT token via the controller.

How should indexes be structured using this skill?

All compound indexes must have communityId as the first field. This optimizes query efficiency for tenant-scoped lookups and reinforces logical isolation.

Why is the communityId required in every query?

Including the communityId in every query ensures strict data isolation, preventing one community from ever accessing or modifying data belonging to another, which is critical for security.

Aegis Tenancy Enforcer

Name: Aegis Tenancy Enforcer
Author: muhammadcaeed

bymuhammadcaeed

0•

数据库管理

Enforces strict multi-tenant data isolation by ensuring mandatory communityId filters across all MongoDB operations and service logic.

The Aegis Tenancy Enforcer is a specialized security and database skill designed to prevent cross-tenant data breaches in multi-tenant applications. It provides Claude with rigorous guidelines for writing MongoDB queries, repository methods, and service layer logic, mandating that every database interaction is scoped to a specific community. By emphasizing secure communityId sourcing from JWT tokens and requiring tenant-first compound indexes, this skill ensures that developers maintain high security standards and query performance while building complex community-based platforms.

主要功能

01Secure communityId extraction guidelines from JWT vs request bodies

02Tenant-first compound index optimization for performance and isolation

030 GitHub stars

04Standardized multi-tenant repository patterns for find, update, and delete

05Mandatory communityId filtering for all MongoDB CRUD operations

06Strict multi-tenant aggregation pipeline enforcement using $match stages

使用场景

01Building secure multi-tenant SaaS applications using MongoDB and NestJS

02Implementing new features that require strict data isolation between user communities

03Auditing existing repository code for potential cross-tenant security vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add muhammadcaeed/aegis tenancy-enforcer.md

For use in Claude.ai and ChatGPT

主要功能

01Secure communityId extraction guidelines from JWT vs request bodies

02Tenant-first compound index optimization for performance and isolation

030 GitHub stars

04Standardized multi-tenant repository patterns for find, update, and delete

05Mandatory communityId filtering for all MongoDB CRUD operations

06Strict multi-tenant aggregation pipeline enforcement using $match stages

使用场景

01Building secure multi-tenant SaaS applications using MongoDB and NestJS

02Implementing new features that require strict data isolation between user communities

03Auditing existing repository code for potential cross-tenant security vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add muhammadcaeed/aegis tenancy-enforcer.md

For use in Claude.ai and ChatGPT