yoanbernabeu/supabase-pentest-skills

24 AI Agent Skills for professional security auditing of Supabase applications. Detection, key extraction, RLS testing, storage audit, IDOR detection, and comprehensive reporting. Works with Claude Code, Cursor, Windsurf, and 30+ AI agents.

32
/ 100
Emerging

This tool helps security engineers or development teams perform a thorough security audit of their Supabase applications. It takes a public Supabase URL and systematically probes it to identify vulnerabilities like leaked keys, insecure API access, or misconfigured storage buckets. The output is a detailed report with evidence, enabling teams to fix security flaws before they are exploited.

Use this if you need to conduct a comprehensive, systematic security assessment of your Supabase application to identify and document potential vulnerabilities.

Not ideal if you are looking for a tool to perform active penetration testing with write/delete operations or if you lack explicit authorization to test the target application.

security-auditing web-application-security vulnerability-assessment cloud-security developer-security
No Package No Dependents
Maintenance 10 / 25
Adoption 7 / 25
Maturity 11 / 25
Community 4 / 25

How are scores calculated?

Stars

31

Forks

1

Language

License

Last pushed

Jan 31, 2026

Commits (30d)

0

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/agents/yoanbernabeu/supabase-pentest-skills"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.