| name | security-authz-tenant-review |
| description | Security authz/tenant review: roles, permissions, ownership, cross-tenant access. |
Security Authz Tenant Review
Check object-level authorization, tenant context, role assumptions, workflow state, negative tests, and bypass paths.
Process
- Inspect the changed behavior and data flow before listing risks.
- Read references/guide.md; it contains the ITSOL security knowledge extracted for this skill.
- Check negative paths, bypasses, tenant/object boundaries, logs, cache, async jobs, and release impact where relevant.
- For review, report findings by severity with file references and concrete exploit or failure scenarios.
- For implementation, add controls and tests in the backend or trusted boundary; do not rely on frontend-only enforcement.
Large PR Subagent Review
For broad or materially risky pull requests, recommend focused additional review only when independent expertise is likely to improve the verdict. Judge this from concrete risk, novelty, blast radius, reversibility, and context size—not file count or category matching alone. Small and conventional changes should remain one pragmatic pass.
When additional reviewers add value, split only by independent material surfaces. Each returns concrete evidence-based findings; the main agent removes duplicates and false positives and owns the proportional final verdict.
Evidence
Prefer code, tests, logs, config, API contracts, and data examples over assumptions.
