skills.rest
theeabrarrr
theeabrarrrCOMMUNITY
Explore all skills by this author →
GitHub

saas-migration-auditor

Audit database migration logic for tenant_id integrity and RLS bypass validation.

Updated Dec 26, 2025
Search Tags:#rls#audit#migration#supabase#data-integrity#saas#tenant_id
One-click install
npx skills add https://github.com/theeabrarrr/LPG-Connect --skill saas-migration-auditor
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: saas-migration-auditor
Source: https://github.com/theeabrarrr/LPG-Connect/tree/main/.agents/skills/saas-migration-auditor
Command: npx skills add https://github.com/theeabrarrr/LPG-Connect --skill saas-migration-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits and verifies database migration logic to ensure tenant_id integrity during multi-tenant SaaS transitions.

Core Features & Use Cases

  • Validate tenant_id presence on core tables like users, customers, and orders.
  • Verify Super Admin RLS bypass behavior and cross-tenant access safety without breaking tenant data UI.
  • Use live database inspection (e.g., Supabase MCP) to validate migration states and bindings.

Quick Start

Run an audit pass on a legacy migration to identify missing tenant bindings and RLS bypass issues.

Frequently Asked Questions about saas-migration-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit multi-tenant SaaS migrations for tenant_id data integrity?▼

To audit multi-tenant SaaS migrations, validate tenant_id presence on core tables and verify cross-tenant access rules. This ensures data integrity by confirming tenant bindings are correctly applied during database transitions.

How do I validate Supabase RLS bypass behavior for super admin roles?▼

Validating Supabase RLS bypass behavior involves checking super admin roles and cross-tenant access rules. This verifies that RLS policies correctly restrict data access without breaking tenant data UI flows.

How do I check missing tenant_id bindings on legacy single-tenant users?▼

Checking missing tenant_id bindings requires running an audit pass on legacy migrations. This identifies legacy single-tenant users and core tables lacking proper tenant bindings before completing the SaaS transition.

Can I use Supabase MCP to inspect live database migration states?▼

Yes, you can use Supabase MCP to inspect live database states. This validates actual migration states and bindings directly against the database, ensuring tenant_id integrity across authentication and data access flows.

What happens if RLS policies block cross-tenant access during a SaaS migration?▼

If RLS policies block cross-tenant access, it indicates strict tenant data isolation. An audit pass verifies these rules are safely enforced without breaking the tenant data UI or preventing legitimate super admin access.

Related Skills

Explore More Software Engineering Skills→
arroschavesarroschaves
1

supabase-automation

Automate Supabase database queries, table management, and SQL execution via Rube MCP.

Community
Advanced
patricio0312revpatricio0312rev
5

multi-tenant-safety-checker

Enforce tenant isolation in PostgreSQL with RLS and Prisma.

Community
Advanced
marquesfelipmarquesfelip

single-database-tenant-isolation

Enforce tenant_id scoping across tenant-related tables in single-database SaaS applications.

Community
Advanced
aigars-stgaigars-stg

db

Query STP Supabase database with natural language and explore schemas.

Community
Intermediate