AGENT SKILLS · 任务装备
值得安装的 Agent Skills
汇总公开仓库中已验证的 Skills。安装前先看清它能做什么、包内包含什么、热度如何，以及来源是否可靠。
- 目录范围
- 已验证
- Skills
- 21,086
- 仓库
- 3226
- 最近同步
- 2026年10月22日
yoanbernabeusupabase-audit-auth-config
Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-auth-signup
Test if user signup is open and identify potential abuse vectors in the registration process.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-auth-users
Test for user enumeration vulnerabilities through various authentication endpoints.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-authenticated
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-list
List all storage buckets and their configuration to identify the storage attack surface.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-public
Identify storage buckets that are publicly accessible and may contain sensitive data.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-buckets-read
Attempt to list and read files from storage buckets to verify access controls.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-functions
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-realtime
Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-rls
Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-rpc
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-tables-list
List all tables exposed via the Supabase PostgREST API to identify the attack surface.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-audit-tables-read
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-detect
Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-evidence
Initialize and manage the evidence collection directory for professional security audits with documented proof of findings.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-anon-key
Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-db-string
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-jwt
Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-service-key
CRITICAL - Detect if the Supabase servicerole key is leaked in client-side code. This is a P0 severity issue.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-extract-url
Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-help
Quick reference for all Supabase security audit skills with usage examples and command overview.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-report
Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
yoanbernabeusupabase-report-compare
Compare two security audit reports to track remediation progress and identify new vulnerabilities.
- 安装量
- 2
- GitHub Stars
- 69
- 最近更新
- 1月31日
ncklrscommunity-builder
Expert community-led growth and community management guidance. Use when building developer communities, Discord/Slack communities, online communities, managing community platforms, designing member onboarding, creating engagement programs, running ambassador programs, measuring community health, setting up moderation systems, or implementing DevRel strategies. Use for community-led growth, member activation, user-generated content programs, and community governance.
- 安装量
- 2
- GitHub Stars
- 51
- 最近更新
- 2月26日