AGENT SKILLS · MISSION KIT
Useful agent skills ranked by real adoption
Browse verified skills from public repositories. Compare what each skill does, package contents, install activity, and source evidence before adding it to your agent.
- CATALOG SCOPE
- VERIFIED
- skills
- 21,086
- repositories
- 3226
- last synced
- Oct 22, 2026
yoanbernabeusupabase-audit-auth-config
Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-auth-signup
Test if user signup is open and identify potential abuse vectors in the registration process.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-auth-users
Test for user enumeration vulnerabilities through various authentication endpoints.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-authenticated
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-buckets-list
List all storage buckets and their configuration to identify the storage attack surface.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-buckets-public
Identify storage buckets that are publicly accessible and may contain sensitive data.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-buckets-read
Attempt to list and read files from storage buckets to verify access controls.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-functions
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-realtime
Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-rls
Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-rpc
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-tables-list
List all tables exposed via the Supabase PostgREST API to identify the attack surface.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-audit-tables-read
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-detect
Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-evidence
Initialize and manage the evidence collection directory for professional security audits with documented proof of findings.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-extract-anon-key
Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-extract-db-string
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-extract-jwt
Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-extract-service-key
CRITICAL - Detect if the Supabase servicerole key is leaked in client-side code. This is a P0 severity issue.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-extract-url
Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-help
Quick reference for all Supabase security audit skills with usage examples and command overview.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-report
Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
yoanbernabeusupabase-report-compare
Compare two security audit reports to track remediation progress and identify new vulnerabilities.
- installs
- 2
- GitHub stars
- 69
- Updated
- Jan 31
ncklrscommunity-builder
Expert community-led growth and community management guidance. Use when building developer communities, Discord/Slack communities, online communities, managing community platforms, designing member onboarding, creating engagement programs, running ambassador programs, measuring community health, setting up moderation systems, or implementing DevRel strategies. Use for community-led growth, member activation, user-generated content programs, and community governance.
- installs
- 2
- GitHub stars
- 51
- Updated
- Feb 26