supabase-audit-rls
Find gaps in your Supabase data access rules.
What it does
Tests database access policies for bypasses and reports vulnerabilities with proof-of-concept queries, impact assessments, and SQL fixes.
When to use it
Use after discovering table data exposure, to verify access policies or test bypasses, or during a comprehensive security audit.
How to use it
Give it a Supabase project to audit; it returns a table-by-table security report with findings and recommended fixes.
Uses
Good to know
- sends a credential to a server: authenticated user token
What you need · 3
Requires an existing Supabase project to audit, with its tables already listed.
The test commands use ANON_KEY as the API key and, for the anonymous access test, as a bearer token.
An authenticated user token enables authenticated and cross-user access tests; it is sent in the Authorization header.
Access · 1
This skill
Supabase
Tests anonymous record creation