Supabase Audit Auth Signup

Tests your Supabase signup flow for common security holes like whether disposable emails get through, if weak passwords are accepted, and whether responses leak information about existing users. It checks rate limiting, password policies, and email validation, then flags issues by priority. You'd run this during an auth security audit or when setting up a new project to catch misconfigurations before they become problems. The progressive logging requirement is aggressive but makes sense since you want findings saved even if testing gets interrupted mid-run. Most useful when you need specific evidence about what's actually being accepted at the registration endpoint rather than just assuming your auth config is locked down.

skills.sh installs: 495
GitHub stars: 75
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yoanbernabeu/supabase-pentest-skills --skill supabase-audit-auth-signup --agent claude-code

Installs into .claude/skills of the current project.

Files

Signup Flow Audit

🔴 CRITICAL: PROGRESSIVE FILE UPDATES REQUIRED

You MUST write to context files AS YOU GO, not just at the end.

Write to .sb-pentest-context.json IMMEDIATELY after each test completed

Log to .sb-pentest-audit.log BEFORE and AFTER each test

DO NOT wait until the skill completes to update files

If the skill crashes or is interrupted, all prior findings must already be saved

This is not optional. Failure to write progressively is a critical error.