supabase-audit-authenticated

What problem does it solve?

This Skill enables security teams to audit and compare access for authenticated versus anonymous users in Supabase apps, surfacing IDOR, cross-user access, and privilege escalation issues.

Core Features & Use Cases

• Test User Creation & Consent: Create a controlled test user in your Supabase project with explicit permission to perform authenticated checks.
• Authenticated vs Anonymous Comparison: Validate data exposure differences across tables, storage, and APIs, highlighting RLS and misconfigurations.
• IDOR & Privilege Escalation Discovery: Detect insecure direct object references and privilege escalation paths by using authenticated sessions.
• Evidence & Reporting: Generate progressive context updates and evidence artifacts for audit trails.

Quick Start

Use the supabase-audit-authenticated skill to create a test user and begin comparing access patterns between anonymous and authenticated sessions.