Catch exposed database passwords in client code.
Checks client-side code for exposed PostgreSQL connection strings and records findings with remediation guidance.
When to use it
Use during security audits, before production, or when Supabase database access is suspected.
Give it an application URL; it checks for exposed database credentials and saves findings and evidence files.
What you provide
The target application must be accessible.
This skill
the target application's JavaScript bundles
Scans publicly served JavaScript bundles