theeabrarrr/saas-migration-auditor
.agents/skills/saas-migration-auditor/SKILL.md
Audits and verifies database migration logic for a multi-tenant SaaS. Ensures that all users (especially legacy single-tenant users) have valid tenant_id bindings, and that Super Admins safely bypass RLS without breaking UI functionality.
testing
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add theeabrarrr/LPG-Connect saas-migration-auditorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 8:30 PM20.7s1 file scanned
SKILL.md
- name:
- saas-migration-auditor
- description:
- Audits and verifies database migration logic for a multi-tenant SaaS. Ensures that all users (especially legacy single-tenant users) have valid tenant_id bindings, and that Super Admins safely bypass RLS without breaking UI functionality.
SaaS Migration Auditor
This skill provides mandatory guidelines for verifying and maintaining data integrity when transitioning from a single-tenant to a multi-tenant SaaS architecture.
Rules
1. Tenant ID Verification
Always ensure that every record in the users, customers, orders, and other core tables has a valid tenant_id. Legacy users missing a tenant_id are considered corrupted and must be migrated or patched.
2. Multi-Tier Authentication Audit
When auditing authentication flows, verify both the auth.users JSON payload (raw_user_meta_data) and the public.users table.
- Super Admins: Must have
role: 'super_admin'and typically a specifically designated systemtenant_id(e.g.,00000000-0000-0000-0000-000000000000or the owner tenant ID). - Tenant Users: Must have a valid UUID
tenant_idmapping to an active tenant in thetenantstable.
3. Super Admin RLS Bypass Confirmation
Verify that Row Level Security (RLS) policies accurately grant Super Admins cross-tenant SELECT access where intended, without compromising the insert/update integrity of individual tenant data. The Super Admin UI should not break when encountering mixed tenant data.
4. Supabase MCP Usage
Use the Supabase MCP to actively query live database states when performing migration audits, rather than guessing data schemas.
Related Skills
theeabrarrr/skill-creator
tools
VerifiedTrustedCommunity
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
SKILL.mdUpdated Apr 16, 2026
theeabrarrr/transaction-integrity
testing
VerifiedTrustedCommunity
Enforces atomic transactions for operations spanning multiple database tables (e.g., Orders, Ledgers, Inventory) to prevent partial updates. Use this skill when implementing financial logic, order processing, or any multi-table mutations.
SKILL.mdUpdated Apr 16, 2026
theeabrarrr/system-reality-auditor
development
VerifiedTrustedCommunity
Performs a triple-point audit to synchronize codebase, database schema, and project documentation states. Use this skill to align the PRD, Gap Analysis, and Execution Plan with the actual system reality.
SKILL.mdUpdated Apr 16, 2026
theeabrarrr/supabase-postgres-best-practices
data-ai
VerifiedTrustedCommunity
Postgres performance optimization and best practices from Supabase. Use this skill when writing, reviewing, or optimizing Postgres queries, schema designs, or database configurations.
SKILL.mdUpdated Apr 16, 2026