yoanbernabeu avatar

yoanbernabeu/supabase-pentest-skills

skills.sh installs
13.2K
skills
23

Install

$ npx -y skills add yoanbernabeu/supabase-pentest-skills --agent claude-code

Installs into .claude/skills of the current project.

Skills

1yoanbernabeu avatarsupabase-audit-rlsyoanbernabeu/supabase-pentest-skillsTest Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.1.2Kskills.sh installs
2yoanbernabeu avatarsupabase-audit-functionsyoanbernabeu/supabase-pentest-skillsDiscover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.1.1Kskills.sh installs
3yoanbernabeu avatarsupabase-pentestyoanbernabeu/supabase-pentest-skillsOrchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.725skills.sh installs
4yoanbernabeu avatarsupabase-audit-auth-configyoanbernabeu/supabase-pentest-skillsAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.576skills.sh installs
5yoanbernabeu avatarsupabase-audit-rpcyoanbernabeu/supabase-pentest-skillsList and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.551skills.sh installs
6yoanbernabeu avatarsupabase-audit-realtimeyoanbernabeu/supabase-pentest-skillsTest Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.544skills.sh installs
7yoanbernabeu avatarsupabase-helpyoanbernabeu/supabase-pentest-skillsQuick reference for all Supabase security audit skills with usage examples and command overview.525skills.sh installs
8yoanbernabeu avatarsupabase-reportyoanbernabeu/supabase-pentest-skillsGenerate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.516skills.sh installs
9yoanbernabeu avatarsupabase-audit-tables-readyoanbernabeu/supabase-pentest-skillsAttempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.511skills.sh installs
10yoanbernabeu avatarsupabase-audit-buckets-publicyoanbernabeu/supabase-pentest-skillsIdentify storage buckets that are publicly accessible and may contain sensitive data.509skills.sh installs
11yoanbernabeu avatarsupabase-audit-auth-usersyoanbernabeu/supabase-pentest-skillsTest for user enumeration vulnerabilities through various authentication endpoints.506skills.sh installs
12yoanbernabeu avatarsupabase-audit-tables-listyoanbernabeu/supabase-pentest-skillsList all tables exposed via the Supabase PostgREST API to identify the attack surface.504skills.sh installs
13yoanbernabeu avatarsupabase-extract-anon-keyyoanbernabeu/supabase-pentest-skillsExtract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.501skills.sh installs
14yoanbernabeu avatarsupabase-detectyoanbernabeu/supabase-pentest-skillsDetect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.500skills.sh installs
15yoanbernabeu avatarsupabase-extract-service-keyyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.500skills.sh installs
16yoanbernabeu avatarsupabase-extract-db-stringyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.499skills.sh installs
17yoanbernabeu avatarsupabase-audit-buckets-listyoanbernabeu/supabase-pentest-skillsList all storage buckets and their configuration to identify the storage attack surface.498skills.sh installs
18yoanbernabeu avatarsupabase-audit-buckets-readyoanbernabeu/supabase-pentest-skillsAttempt to list and read files from storage buckets to verify access controls.497skills.sh installs
19yoanbernabeu avatarsupabase-audit-auth-signupyoanbernabeu/supabase-pentest-skillsTest if user signup is open and identify potential abuse vectors in the registration process.495skills.sh installs
20yoanbernabeu avatarsupabase-report-compareyoanbernabeu/supabase-pentest-skillsCompare two security audit reports to track remediation progress and identify new vulnerabilities.491skills.sh installs
21yoanbernabeu avatarsupabase-extract-jwtyoanbernabeu/supabase-pentest-skillsExtract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.487skills.sh installs
22yoanbernabeu avatarsupabase-extract-urlyoanbernabeu/supabase-pentest-skillsExtract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.487skills.sh installs
23yoanbernabeu avatarsupabase-audit-authenticatedyoanbernabeu/supabase-pentest-skillsCreate a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege es446skills.sh installs