
yoanbernabeu/supabase-pentest-skills
- skills.sh installs
- 13.2K
- skills
- 23
Install
$ npx -y skills add yoanbernabeu/supabase-pentest-skills --agent claude-codeInstalls into .claude/skills of the current project.
Skills
1
supabase-audit-rlsyoanbernabeu/supabase-pentest-skillsTest Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.1.2Kskills.sh installs
2
supabase-audit-functionsyoanbernabeu/supabase-pentest-skillsDiscover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.1.1Kskills.sh installs
3
supabase-pentestyoanbernabeu/supabase-pentest-skillsOrchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.725skills.sh installs
4
supabase-audit-auth-configyoanbernabeu/supabase-pentest-skillsAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.576skills.sh installs
5
supabase-audit-rpcyoanbernabeu/supabase-pentest-skillsList and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.551skills.sh installs
6
supabase-audit-realtimeyoanbernabeu/supabase-pentest-skillsTest Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.544skills.sh installs
7
supabase-helpyoanbernabeu/supabase-pentest-skillsQuick reference for all Supabase security audit skills with usage examples and command overview.525skills.sh installs
8
supabase-reportyoanbernabeu/supabase-pentest-skillsGenerate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.516skills.sh installs
9
supabase-audit-tables-readyoanbernabeu/supabase-pentest-skillsAttempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.511skills.sh installs
10
supabase-audit-buckets-publicyoanbernabeu/supabase-pentest-skillsIdentify storage buckets that are publicly accessible and may contain sensitive data.509skills.sh installs
11
supabase-audit-auth-usersyoanbernabeu/supabase-pentest-skillsTest for user enumeration vulnerabilities through various authentication endpoints.506skills.sh installs
12
supabase-audit-tables-listyoanbernabeu/supabase-pentest-skillsList all tables exposed via the Supabase PostgREST API to identify the attack surface.504skills.sh installs
13
supabase-extract-anon-keyyoanbernabeu/supabase-pentest-skillsExtract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.501skills.sh installs
14
supabase-detectyoanbernabeu/supabase-pentest-skillsDetect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.500skills.sh installs
15
supabase-extract-service-keyyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.500skills.sh installs
16
supabase-extract-db-stringyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.499skills.sh installs
17
supabase-audit-buckets-listyoanbernabeu/supabase-pentest-skillsList all storage buckets and their configuration to identify the storage attack surface.498skills.sh installs
18
supabase-audit-buckets-readyoanbernabeu/supabase-pentest-skillsAttempt to list and read files from storage buckets to verify access controls.497skills.sh installs
19
supabase-audit-auth-signupyoanbernabeu/supabase-pentest-skillsTest if user signup is open and identify potential abuse vectors in the registration process.495skills.sh installs
20
supabase-report-compareyoanbernabeu/supabase-pentest-skillsCompare two security audit reports to track remediation progress and identify new vulnerabilities.491skills.sh installs
21
supabase-extract-jwtyoanbernabeu/supabase-pentest-skillsExtract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.487skills.sh installs
22
supabase-extract-urlyoanbernabeu/supabase-pentest-skillsExtract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.487skills.sh installs
23
supabase-audit-authenticatedyoanbernabeu/supabase-pentest-skillsCreate a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege es446skills.sh installs