skills.rest
Benmore-Studio
Benmore-StudioOFFICIAL
Explore all skills by this author →
WebsiteGitHub

multi-tenant-scan

Identifies and classifies missing tenant filters in Django, FastAPI, and Rails codebases.

1|Updated Jan 28, 2026
Search Tags:#security#multi-tenant#fastapi#django#rails#code-scan#data-leak
One-click install
npx skills add https://github.com/Benmore-Studio/Benmore-Meridian --skill multi-tenant-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: multi-tenant-scan
Source: https://github.com/Benmore-Studio/Benmore-Meridian/tree/main/skills/multi-tenant-scan
Command: npx skills add https://github.com/Benmore-Studio/Benmore-Meridian --skill multi-tenant-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scans a codebase to identify missing tenant isolation filters to prevent data leaks between tenants in multi-tenant SaaS apps.

Core Features & Use Cases

  • Auto-detect tenant architecture across Django, FastAPI, and Rails projects.
  • Discover and inventory all data access points (ViewSets, queries, services) that may expose tenant data.
  • Classify findings into Safe, Exempt, Indirect, Missing, or Bypass to prioritize remediation.
  • Generate a structured scan report with actionable recommendations for developers and security teams.

Quick Start

Run the scanner on your repository to identify and report all tenant data access points lacking proper tenant filters.

Frequently Asked Questions about multi-tenant-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find missing tenant isolation filters in a multi-tenant app?▼

Missing tenant filters allow unauthorized cross-tenant data access in multi-tenant apps. Scanning locates data access points like ViewSets and queries, classifying them as Safe, Missing, or Bypass to prevent data leakage between tenants through targeted remediation.

Can I scan Django and FastAPI projects for data leak vulnerabilities?▼

Yes, you can scan Django and FastAPI projects for data leak vulnerabilities. The scanner auto-detects tenant architecture across these frameworks, tracing data access points through dependencies to identify and report missing tenant filters.

Does the scanner support Rails codebases for multi-tenant security audits?▼

Yes, the scanner supports Rails codebases for multi-tenant security audits. It analyzes Rails projects alongside Django and FastAPI to discover data access points and classify missing tenant filters into structured scan reports.

What is the best way to detect tenant filter bypasses in a SaaS application?▼

The best way to detect tenant filter bypasses is running an automated scan that traces access points through dependencies and classifies them as Safe, Exempt, Indirect, Missing, or Bypass. This produces a structured report guiding targeted security remediation for multi-tenant apps.

How are missing tenant filter findings classified for remediation?▼

Missing tenant filter findings are classified into Safe, Exempt, Indirect, Missing, or Bypass categories. This classification prioritizes remediation by distinguishing properly filtered access points from those lacking or bypassing tenant restrictions.

Related Skills

Explore More Software Engineering Skills→
jcastillotxjcastillotx

IDOR Vulnerability Testing

Identify and test IDOR vulnerabilities by manipulating object references across API endpoints.

Community
Advanced
vecearvecear

multi-tenant-safety-checker

Enforce tenant isolation with PostgreSQL Row Level Security and automated tests.

Community
Advanced
eleva-labseleva-labs

security-audit

Plan security audits with checklists for dependency scanning and secret detection.

Official
Basic
Camilo8902Camilo8902

multi-tenant-safety-checker

Enforce tenant isolation in PostgreSQL with Row Level Security policies.

Community
Advanced