supabase-audit-buckets-read

What problem does it solve?

This skill helps security auditors quickly verify storage bucket access controls and detect public exposure, preventing unauthorized data access in Supabase projects.

Core Features & Use Cases

• Bucket discovery & access checks: lists buckets and tests read access, metadata visibility, and public URL accessibility.
• Sensitive-data detection: identifies files that may contain credentials or secrets exposed to the public.
• Evidence and logging: generates structured evidence directories and progressive context logs for traceability across audits.

Quick Start

Run the storage-buckets-read skill in your audit workspace. Ensure you have an anon or service role key, then execute the audit across all buckets and review the generated evidence in the .sb-pentest-evidence directory and progress logs in .sb-pentest-audit.log.