supabase-pentest-skills

<p align="center">
  <img src="https://img.shields.io/badge/Skills-24-brightgreen" alt="24 Skills">
  <img src="https://img.shields.io/badge/License-MIT-blue" alt="MIT License">
  <img src="https://img.shields.io/badge/PRs-Welcome-orange" alt="PRs Welcome">
</p>

<h1 align="center">Supabase Pentest Skills</h1>

<p align="center">
  <strong>24 AI Agent Skills for professional security auditing of Supabase applications.</strong><br>
  Detection, key extraction, RLS testing, IDOR detection, storage audit, evidence collection, comprehensive reporting.
</p>

<p align="center">
  <a href="#quick-install">Install</a> •
  <a href="#all-24-skills">Skills</a> •
  <a href="#example-usage">Usage</a> •
  <a href="#contributing">Contribute</a>
</p>

---

## Quick Install

```bash
npx skills add yoanbernabeu/supabase-pentest-skills
```

**That's it.** Works with Claude Code, Cursor, Codex, OpenCode, Windsurf, and 30+ AI agents.

### One-Liners

```bash
# Install everything (24 skills)
npx skills add yoanbernabeu/supabase-pentest-skills

# Install only detection skills
npx skills add yoanbernabeu/supabase-pentest-skills --skill supabase-detect

# Install globally (available in all projects)
npx skills add yoanbernabeu/supabase-pentest-skills -g

# List all available skills
npx skills add yoanbernabeu/supabase-pentest-skills --list

# Non-interactive (CI/CD friendly)
npx skills add yoanbernabeu/supabase-pentest-skills --all -y
```

---

## Recommended Setup (New Audit)

> **Note**: This setup is optimized for [Claude Code](https://docs.anthropic.com/en/docs/claude-code) users. The CLAUDE.md template provides specific instructions for Claude Code's agent capabilities.

For professional audits with complete logging and evidence collection, follow this setup:

### Step 1: Install the Skills

```bash
npx skills add yoanbernabeu/supabase-pentest-skills
```

### Step 2: Create a Fresh Audit Directory

```bash
mkdir my-security-audit
cd my-security-audit
```

### Step 3: Download the CLAUD