yoanbernabeu/supabase-pentest-skills

1

supabase-audit-rls Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.

yoanbernabeu/supabase-pentest-skills

894

2

supabase-pentest Orchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.

yoanbernabeu/supabase-pentest-skills

578

3

supabase-audit-auth-config Analyze Supabase authentication configuration for security weaknesses and misconfigurations.

yoanbernabeu/supabase-pentest-skills

450

4

supabase-audit-functions Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.

yoanbernabeu/supabase-pentest-skills

438

5

supabase-audit-realtime Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.

yoanbernabeu/supabase-pentest-skills

431

6

supabase-audit-rpc List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.

yoanbernabeu/supabase-pentest-skills

428

7

supabase-help Quick reference for all Supabase security audit skills with usage examples and command overview.

yoanbernabeu/supabase-pentest-skills

420

8

supabase-report Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.

yoanbernabeu/supabase-pentest-skills

408

9

supabase-audit-buckets-public Identify storage buckets that are publicly accessible and may contain sensitive data.

yoanbernabeu/supabase-pentest-skills

398

10

supabase-audit-tables-read Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.

yoanbernabeu/supabase-pentest-skills

398

11

supabase-extract-anon-key Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for…

yoanbernabeu/supabase-pentest-skills

397

12

supabase-audit-auth-users Test for user enumeration vulnerabilities through various authentication endpoints.

yoanbernabeu/supabase-pentest-skills

396

13

supabase-detect Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.

yoanbernabeu/supabase-pentest-skills

396

14

supabase-extract-db-string CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.

yoanbernabeu/supabase-pentest-skills

395

15

supabase-audit-tables-list List all tables exposed via the Supabase PostgREST API to identify the attack surface.

yoanbernabeu/supabase-pentest-skills

394

16

supabase-extract-service-key CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.

yoanbernabeu/supabase-pentest-skills

394

17

supabase-audit-buckets-list List all storage buckets and their configuration to identify the storage attack surface.

yoanbernabeu/supabase-pentest-skills

391

18

supabase-audit-buckets-read Attempt to list and read files from storage buckets to verify access controls.

yoanbernabeu/supabase-pentest-skills

388

19

supabase-audit-auth-signup Test if user signup is open and identify potential abuse vectors in the registration process.

yoanbernabeu/supabase-pentest-skills

385

20

supabase-report-compare Compare two security audit reports to track remediation progress and identify new vulnerabilities.

yoanbernabeu/supabase-pentest-skills

385

21

supabase-extract-jwt Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.

yoanbernabeu/supabase-pentest-skills

382

22

supabase-extract-url Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.

yoanbernabeu/supabase-pentest-skills

382

23

supabase-audit-authenticated Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detect…

yoanbernabeu/supabase-pentest-skills

344

24

supabase-evidence Initialize and manage the evidence collection directory for professional security audits with documented proof of fin…

yoanbernabeu/supabase-pentest-skills

184

25

supabase Main entry point for Supabase security audits. Launch a complete audit or quickly access any toolkit feature.

yoanbernabeu/supabase-pentest-skills

1