Supabase Pentest Skills
Supabase Pentest Skills from yoanbernabeu/supabase-pentest-skills.
Skills in this plugin
3- ▌ Supabase Extract Anon Key · yoanbernabeuExtract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
- ▌ Supabase Extract DB String · yoanbernabeuCRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
- ▌ Supabase Audit Buckets Read · yoanbernabeuAttempt to list and read files from storage buckets to verify access controls.