Multi-tenant isolation, IDOR and row-level security. Use to find every path where one tenant could read or write another tenant data: "we forgot to filter by org_id", "can users see each other data", "audit these endpoints for cross-tenant leaks", "make an unscoped query impossible". Covers scoped repositories, RLS, default-deny routing and the two-tenant test. For what the UI shows use ux.
安装
npx skills add rainmanjam/poka-yoke --skill authznpx skills add rainmanjam/poka-yoke --skill authz -a claude-code -gnpx skills add rainmanjam/poka-yoke --skill authz -a codex -ggemini skills install https://github.com/rainmanjam/poka-yoke.git --path plugins/poka-yoke/skills/authzgh skill install rainmanjam/poka-yoke authzgit clone --depth 1 https://github.com/rainmanjam/poka-yoke /tmp/rainmanjam__poka-yoke
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/rainmanjam__poka-yoke/plugins/poka-yoke/skills/authz ~/.claude/skills/authz # Claude Code
cp -R /tmp/rainmanjam__poka-yoke/plugins/poka-yoke/skills/authz ~/.agents/skills/authz # Codex, Cursor, Gemini CLI, Copilot, OpenCode