Authorization Boundary Test Reviewer

The problem

Happy-path tests often pass while leaving catastrophic gaps in tenant isolation and object ownership. You cannot rely on code reviews alone to catch missing denial cases or privilege escalation risks in complex authorization logic.

What it does

• Analyzes test suites to ensure they prove cross-tenant read, write, and delete actions are strictly denied.
• Maps a Subject-Object-Action matrix to identify missing negative tests for specific roles and permissions.
• Reviews privilege transitions, including role demotion, revocation, and permission cache invalidation.
• Evaluates service-account authority and background-job identities to prevent unbounded internal access.
• Identifies field-level leakage in list, search, and aggregate endpoints that might bypass primary checks.

Why this beats prompting it yourself

General LLMs often mistake authentication for authorization or assume a UI check is sufficient. This skill uses a specialized rubric to hunt for identifier manipulation, stale cache vulnerabilities, and specific boundary failures that generic prompts overlook.

Use cases

• Verifying tenant isolation coverage before a multi-tenant SaaS release.
• Auditing RBAC or ABAC test suites after adding sensitive administrative workflows.
• Identifying gaps in object-level ownership checks for destructive actions like delete or export.
• Reviewing service-account permissions to ensure least-privilege enforcement in internal services.

Known limitations

This tool reviews test logic and code definitions but cannot access live production environments or execute actual penetration tests. It does not replace the need for runtime security controls or formal threat modeling.