skills.rest
marvinbiss
marvinbissCOMMUNITY
Explore all skills by this author →
GitHub

supabase-audit-buckets-read

Tests Supabase storage bucket file access to verify permissions and RLS policy effectiveness.

Updated Jan 31, 2026
Search Tags:#rls#access control#security audit#supabase#storage#data exposure
One-click install
npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-audit-buckets-read-marvinbiss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase-audit-buckets-read
Source: https://github.com/marvinbiss/servicesartisans/tree/main/.cursor/skills/supabase-audit-buckets-read
Command: npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-audit-buckets-read-marvinbiss

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill rigorously tests access controls for Supabase storage buckets, ensuring that sensitive files are not publicly exposed and that private data remains protected.

Core Features & Use Cases

  • File Access Verification: Attempts to list, read metadata, and download files from storage buckets to confirm permissions.
  • RLS Policy Testing: Validates the effectiveness of Row Level Security policies on storage access.
  • Sensitive Data Detection: Identifies and flags exposed sensitive files (e.g., database backups, secrets, PII) within buckets.
  • Use Case: After configuring Supabase storage, use this skill to proactively verify that only intended users or roles can access specific files and that no critical data is inadvertently exposed to the public internet.

Quick Start

Audit file access for all storage buckets to identify any sensitive data exposure.

Frequently Asked Questions about supabase-audit-buckets-read

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Supabase storage bucket access controls for sensitive data exposure?▼

You test Supabase storage bucket access controls by actively listing files, reading metadata, downloading samples, and checking public URLs. This verifies RLS policy effectiveness and flags exposed sensitive data.

How can I verify if my Supabase RLS policies are actually protecting private storage buckets?▼

You verify Supabase RLS policies on storage by attempting to read metadata and download files from private buckets to confirm permissions. This validates whether your row level security rules actually block unauthorized file access.

Can I detect exposed PII or secrets in Supabase public storage buckets?▼

Yes, you detect exposed PII or secrets in Supabase storage buckets by scanning filename patterns and sampling downloaded file content. This identifies sensitive files inadvertently accessible via public URLs.

What is the best way to test public URL access for Supabase storage files?▼

The best way to test public URL access for Supabase storage files is to programmatically attempt downloads and metadata reads across both public and private buckets. This generates detailed remediation evidence.

Does this storage access audit work with both public and private Supabase buckets?▼

Yes, this storage access audit works with both public and private Supabase buckets by checking public URL access and attempting direct file downloads. It validates permissions across all bucket types to find data exposure.

Related Skills

Explore More Software Engineering Skills→
JaveedIshaqJaveedIshaq
1

database-migration-manager

Generate idempotent Supabase database migrations with RLS policies and storage buckets.

Community
Advanced
oehm-smithoehm-smith

Security Engineer

Audit database security policies, authentication, and authorization controls.

Community
Advanced
nathanielcrowell12-specnathanielcrowell12-spec

supabase

Implement Supabase RLS policies, type-safe queries, and storage operations for PhotoVault.

Community
Advanced
yoanbernabeuyoanbernabeu
62

supabase-audit-buckets-list

Enumerate Supabase storage buckets and parse their public flag, size limits, and MIME types.

Community
Advanced