supabase-audit-functions

Discover and test Supabase Edge Functions for security vulnerabilities.

62|3|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-audit-functions
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase-audit-functions
Source: https://github.com/yoanbernabeu/supabase-pentest-skills/tree/main/skills/audit-functions/supabase-audit-functions
Command: npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-audit-functions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security teams and developers discover and test Supabase Edge Functions to identify vulnerabilities and misconfigurations that could leak data or allow unauthorized access.

Core Features & Use Cases

  • Function discovery: Locate exposed Edge Functions and enumerate their endpoints.
  • Auth and input checks: Verify authentication requirements, input validation, and error handling to prevent leakage and misuse.
  • Security assessment: Produce structured findings and evidence for remediation as part of a security audit.

Quick Start

Run the audit against a Supabase project to begin testing Edge Functions for common security issues and generate an evidentiary report.

Frequently Asked Questions about supabase-audit-functions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Supabase Edge Functions for security vulnerabilities?

To audit Supabase Edge Functions for security vulnerabilities, run an automated discovery process that analyzes function exposure, authentication requirements, input validation, and error handling to identify potential data leakage.

What security gaps should I look for in Supabase Edge Functions?

Common security gaps in Supabase Edge Functions include missing authentication requirements, insufficient input validation, improper error handling, and endpoint misconfigurations that could allow unauthorized access or data leakage.

Do I need a Supabase anon key to test Edge Function authentication?

Yes, testing Edge Function authentication requires a Supabase project URL and anon/public key as a detection prerequisite to discover exposed endpoints and verify their auth and input validation checks.

Can I automate security audits for ongoing Supabase project monitoring?

Yes, you can automate security audits for ongoing monitoring by running continuous vulnerability testing against your Supabase Edge Functions to detect misconfigurations and generate structured findings for remediation.

How does automated vulnerability testing work for exposed Supabase endpoints?

Automated vulnerability testing works by enumerating exposed Supabase Edge Function endpoints, analyzing their authentication barriers, and verifying input validation to produce structured security findings and evidence.

What's the best way to check input validation on Supabase Edge Functions?

The best way to check input validation on Supabase Edge Functions is to run an automated security assessment that tests endpoint exposure and error handling, producing an evidentiary report for remediation.