Supabase Report

Generates a comprehensive Markdown security audit report from Supabase pentesting findings you've already collected. The output is structured for both technical and non-technical audiences: executive summary with security scores, detailed vulnerability breakdowns by severity (P0/P1/P2), proof of concept examples, and a phased remediation plan with owners and deadlines. Notable for its progressive file writing requirement, it saves findings to context files as you go rather than at the end, so you don't lose everything if the process crashes mid-generation. Use this after running audit phases to compile findings into a shareable document. The example output shows realistic vulnerabilities like exposed service keys and public backup buckets, making it clear what stakeholders need to fix first.

skills.sh installs: 516
GitHub stars: 75
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add yoanbernabeu/supabase-pentest-skills --skill supabase-report --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Report Generator

🔴 CRITICAL: PROGRESSIVE FILE UPDATES REQUIRED

You MUST write to context files AS YOU GO, not just at the end.

Write to .sb-pentest-audit.log IMMEDIATELY as you process each section

Update .sb-pentest-context.json with report metadata progressively

DO NOT wait until the entire report is generated to update files

If the skill crashes or is interrupted, the partial progress must already be saved

This is not optional. Failure to write progressively is a critical error.