Multi-Tenant Validation Skill

What problem does it solve?

Ensuring strict data separation and security in a multi-tenant application is paramount but incredibly complex to manage manually. This skill automates the comprehensive validation of workspace isolation, Row Level Security (RLS) policies, and role-based access control, preventing critical data leakage.

Core Features & Use Cases

• Layered Security Checks: Validates isolation across middleware, API routes, database queries, and RLS policies.
• Automated Isolation Tests: Runs a dedicated suite of tests to verify cross-workspace data access is blocked and role-based permissions are enforced.
• RLS Policy Audit: Inspects and verifies the existence and correctness of RLS policies for all database tables.
• Use Case: After modifying a database model or updating RLS policies, use this skill to run a full multi-tenant validation. It will check if the new changes inadvertently allow users from one workspace to access data from another, providing a detailed report and ensuring zero data leakage before deployment.

Quick Start

Run a full multi-tenant validation check on the current codebase. Report on RLS policy status, security test results, and any detected isolation vulnerabilities.