skills.rest
Valynt
ValyntOFFICIAL
Explore all skills by this author →
GitHub

tenant-isolation-checker

Validate tenant isolation in database queries and memory operations.

Updated Nov 17, 2025
Search Tags:#security#isolation#multi-tenant#rls#compliance#code-review#tenant
One-click install
npx skills add https://github.com/Valynt/ValueOS --skill tenant-isolation-checker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tenant-isolation-checker
Source: https://github.com/Valynt/ValueOS/tree/main/.roo/skills/tenant-isolation-checker
Command: npx skills add https://github.com/Valynt/ValueOS --skill tenant-isolation-checker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Verify and enforce tenant isolation across data access, memory layers, and API flows to prevent cross-tenant data leakage.

Core Features & Use Cases

  • Query isolation verification: scans data access code to ensure tenant_id or organization_id filters are present where needed.
  • Memory isolation checks: validates tenant metadata usage in memory queries and vector storage to prevent leakage.
  • API boundary validation & reporting: checks request context propagation and produces a compliance report with risk scoring.
  • Auto-fix suggestions: proposes safe changes to enforce isolation in straightforward cases.

Quick Start

Run the tenant-isolation-checker on your codebase to generate a compliance report.

Frequently Asked Questions about tenant-isolation-checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check for tenant isolation issues in a multi-tenant codebase?▼

Tenant isolation checks validate that database queries and memory operations include tenant_id or organization_id filters. Scanning source paths during code reviews ensures tenant context propagation and prevents cross-tenant data leakage.

What is cross-tenant data leakage in multi-tenant applications?▼

Cross-tenant data leakage happens when data access code lacks tenant_id or organization_id filters, exposing one tenant's data to another. Validating tenant context propagation across API boundaries and memory queries prevents this exposure.

Can I automatically fix missing tenant_id filters in database queries?▼

Yes, auto-fix capabilities propose safe changes to enforce isolation in straightforward cases. These suggestions inject the required tenant context into data access code to prevent cross-tenant data leakage.

Does the tenant isolation checker validate memory and vector storage queries?▼

Yes, the checker validates memory and vector storage queries by checking tenant metadata usage. This memory isolation check ensures multi-tenant services do not leak data across tenants during memory operations.

How do I generate a tenant isolation compliance report for a security audit?▼

Run a source path scan that checks request context propagation and assigns risk scores to generate a compliance report. The resulting report details compliance status across data access and API boundaries for security audits.

Related Skills

Explore More Software Engineering Skills→
Benmore-StudioBenmore-Studio
1

multi-tenant-guard

Enforce tenant isolation in shared-database architectures with org_id filtering.

Official
Intermediate
4lerman4lerman

env-secrets-manager

Audit repositories for sensitive data and manage environment variables securely.

Community
Advanced
greyhaven-aigreyhaven-ai
29

grey-haven-database-conventions

Enforce Grey Haven database conventions across multi-tenant schemas.

Community
Intermediate
vecearvecear

multi-tenant-safety-checker

Enforce tenant isolation with PostgreSQL Row Level Security and automated tests.

Community
Advanced