skills.rest
yoanbernabeu
yoanbernabeuCOMMUNITY
Explore all skills by this author →
Website𝕏@yOyO38GitHub

supabase-audit-buckets-public

Identify publicly accessible storage buckets in Supabase projects.

62|3|Updated Jan 31, 2026
Search Tags:#permissions#supabase#storage#security-audit#data-exposure#public-buckets
One-click install
npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-audit-buckets-public
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase-audit-buckets-public
Source: https://github.com/yoanbernabeu/supabase-pentest-skills/tree/main/skills/audit-storage/supabase-audit-buckets-public
Command: npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-audit-buckets-public

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies misconfigured publicly accessible Supabase storage buckets and assesses the associated risks to help teams remediate exposures quickly.

Core Features & Use Cases

  • Public bucket discovery: Detect which buckets are publicly accessible and analyze their contents for sensitive data.
  • Risk classification: Categorize findings into appropriate, review-needed, or critical misconfigurations.
  • Evidence-ready reporting: Produce structured evidence for audits and incident response.

Quick Start

Run the storage bucket public audit against your Supabase project to identify exposed buckets and sensitive files.

Frequently Asked Questions about supabase-audit-buckets-public

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check for publicly accessible Supabase storage buckets?▼

Check for publicly accessible Supabase storage buckets by analyzing bucket ACLs, public flags, and exposed object metadata using your connected project URL and anon key.

What does a Supabase public bucket security audit include?▼

A Supabase public bucket security audit includes public bucket discovery, risk classification of misconfigurations, and evidence-ready reporting for incident response.

Do I need a Supabase anon key to run a storage bucket exposure audit?▼

Yes, running a storage bucket exposure audit requires a connected Supabase URL and anon key to evaluate bucket access controls and exposed object metadata.

How do I classify risk for misconfigured public buckets in Supabase?▼

Classify risk for misconfigured public buckets in Supabase by categorizing findings into appropriate, review-needed, or critical exposures based on analyzed contents.

Can I use this audit for ongoing monitoring of Supabase bucket access?▼

Yes, you can use this audit for ongoing monitoring of Supabase bucket access in SaaS apps to continuously detect exposed buckets and sensitive files.

Related Skills

Explore More Data & Analytics Skills→
yoanbernabeuyoanbernabeu
62

supabase-audit-buckets-list

Enumerate Supabase storage buckets and parse their public flag, size limits, and MIME types.

Community
Advanced
kalpmodikalpmodi
18

cloud-audit

Audit AWS, GCP, and Azure for misconfigurations and exposed credentials.

Community
Advanced
cwinvestmentscwinvestments
412

memstack-security-rls-checker

Audit Supabase Row Level Security policies across all tables.

Community
Intermediate
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced