This is your command reference when you're using the Supabase security audit suite on Claude. It maps out all 24 skills across detection, extraction, API testing, storage audits, and auth checks. If you're mid-pentest and can't remember whether you need supabase-audit-rls or supabase-audit-rpc, this gives you the quick lookup table. It also shows the common workflows like running a storage-only audit or comparing reports after fixes. The evidence directory structure is well thought out if you're doing professional security work. Honestly, this is most useful in your first few audits until the commands stick, then you'll probably just use the orchestrator.

skills.sh installs
525
GitHub stars
75
last updated
Aug 21, 2026

Install

$ npx -y skills add yoanbernabeu/supabase-pentest-skills --skill supabase-help --agent claude-code

Installs into .claude/skills of the current project.

Files

Supabase Pentest Skills Help

Quick reference for all 24 security audit skills.

When to Use This Skill

  • Need a quick overview of available skills
  • Looking for the right skill for a specific task
  • Want usage examples for a particular skill

Quick Start

# Full guided audit
/supabase-pentest https://myapp.example.com

# Check if app uses Supabase
/supabase-detect https://myapp.example.com

# Generate report from previous audit
/supabase-report

All Skills Reference

Orchestration

SkillCommandPurpose
supabase-pentest/supabase-pentest <url>Full guided security audit
supabase-evidence/supabase-evidenceInitialize evidence collection
supabase-help/supabase-helpThis help reference

Detection

SkillCommandPurpose
supabase-detect/supabase-detect <url>Detect Supabase usage

Extraction

Sponsors

Details

Repository
github.com/yoanbernabeu/supabase-pentest-skills
Categories
Backend & APIs, Security, Databases
First seen
Jun 3, 2026

More from yoanbernabeu/supabase-pentest-skills

All 23
1firebase avatarfirebase-ai-logic-basicsfirebase/skillsfirebase ai logic basics511skills.sh installs
2yoanbernabeu avatarsupabase-extract-service-keyyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.500skills.sh installs
3aj-geddes avatardatabase-performance-debuggingaj-geddes/useful-ai-promptsDebug database performance issues through query analysis, index optimization, and execution plan review. Identify and fix slow queries.499skills.sh installs
4davila7 avatarapi-documentation-generatordavila7/claude-code-templatesGenerate comprehensive, developer-friendly API documentation from code, including endpoints, parameters, examples, and best practices493skills.sh installs
5firebase avatarfirebase-ai-logicfirebase/skillsfirebase ai logic491skills.sh installs
6yoanbernabeu avatarsupabase-extract-urlyoanbernabeu/supabase-pentest-skillsExtract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.487skills.sh installs