supabase-extract-anon-key
yoanbernabeu471 installs
Find the public Supabase key exposed by an app.
What it does
Finds a Supabase application's public API key in client code for security testing.
When to use it
Use after finding the Supabase URL, to check which key is exposed, or before API audits requiring authentication.
How to use it
Give it an application URL or known project reference; it extracts the public key and saves its decoded payload and source in local tracking and evidence files.
What you provide
- an application URL or project reference
Latest review
What you need · 2
The target application must be accessible.
Automatically invokes this skill when the Supabase URL has not already been extracted; it is not needed when the URL is known.
Access · 1
This skill
the target application's client-side code
Read
Reads the app's client-side code