Security · Multi-tenancy

Django access control and IDOR security review. An agent skill from getsentry/skills.

getsentry/skills

Writing to the Neo4j attack-surface graph in RedAmon: the tenant-isolation MERGE key every entity node must carry, where graph methods live (mixins, not the client), and the schema places that must…

samugit83/redamon

Review Langfuse changes for SSRF, tenant isolation, secret handling, unsafe redirects or uploads, RBAC drift, and client telemetry privacy.

langfuse/langfuse

Explains authorization in an Arandu Go application: write a Policy, get a security.Grant through security.Authorize, re-authorize each row, and keep tenant isolation.

arandu-io/arandu

Multi-tenant authz, pre-auth disclosure hardening, and Kali disposition.

bbartling/open-fdd

Secure LLM-powered applications with input validation, output controls, tenant isolation, and abuse prevention.

sickn33/agentic-awesome-skills

Security hardening guidance for AI agent frameworks that process untrusted content, invoke tools, write workspace files, manage runtime identifiers, or handle credentials.

affaan-m/ECC

Check code for the most common, high-risk security vulnerabilities (broken access control, tenant isolation, injection, secrets, SSRF, auth/session, unsafe file handling, mass assignment) before it…

trycompai/comp

Use before committing changes to auth, workspace scoping, channel webhooks, AI tools/MCP, permission settings, or anything handling untrusted channel content in ChatbotX.

ChatbotXIO/ChatbotX

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella

Review an MCP server for common security gaps: LLM-facing surfaces as injection vector (tools, resources, prompts, descriptions), scope blast radius, destructive ops without consent, upstream auth…

cyanheads/pubmed-mcp-server