Catch Supabase admin keys exposed in your app.
Finds exposed Supabase administrator keys in client-side code.
When to use it
Use during security audits, before production deployment, or after detecting Supabase usage.
Give it an application URL; it checks for exposed service keys and saves findings and evidence in local files.
What you provide
The target application must be accessible.
This skill
the target application's public files
Reads your app's public files