supabase-pentest
Find security gaps in your Supabase application.
What it does
Guides an authorized security audit of a Supabase application and produces documented findings, evidence, and a remediation report.
When to use it
Use for a complete Supabase security assessment, a pre-production self-assessment, an investigation after security concerns, or periodic reviews.
How to use it
Give it an application URL and confirm authorization; it conducts an audit with confirmation between phases and saves findings and evidence locally.
What you provide
- the application URL
Uses
What you need · 8
Invokes this skill to initialize evidence collection; whether it must be installed separately is unstated.
Invokes this skill during detection to establish Supabase usage and identify the project URL; installation requirements are unstated.
Access · 2
This skill
Supabase
Creates a consented test user
the target application's client-side code
Scans public code for credentials