skills.rest
marvinbiss
marvinbissCOMMUNITY
Explore all skills by this author →
GitHub

supabase-audit-functions

Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.

Updated Jan 31, 2026
Search Tags:#penetration testing#security audit#supabase#edge functions#vulnerability testing#serverless security
One-click install
npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-audit-functions-marvinbiss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase-audit-functions
Source: https://github.com/marvinbiss/servicesartisans/tree/main/.cursor/skills/supabase-audit-functions
Command: npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-audit-functions-marvinbiss

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill identifies and tests Supabase Edge Functions for critical security vulnerabilities, ensuring your serverless functions are protected against common attack vectors.

Core Features & Use Cases

  • Function Discovery: Automatically finds all deployed Edge Functions within your Supabase project.
  • Security Testing: Assesses authentication requirements, input validation, authorization flaws (like IDOR), and privilege escalation risks.
  • Use Case: Before deploying a new feature that relies on an Edge Function for processing payments, use this Skill to confirm that it correctly handles authentication and validates all input parameters, preventing potential financial fraud.

Quick Start

Audit all Supabase Edge Functions in my project for security vulnerabilities.

Frequently Asked Questions about supabase-audit-functions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test Supabase Edge Functions for security vulnerabilities?▼

Security testing for Supabase Edge Functions involves discovering deployed functions, assessing authentication requirements, evaluating input validation, and identifying authorization flaws like IDOR or privilege escalation risks.

What security misconfigurations affect Supabase serverless functions?▼

Supabase serverless security misconfigurations include missing authentication requirements, inadequate input validation, and authorization flaws that expose functions to IDOR and privilege escalation attacks.

Do I need a Supabase URL to run an Edge Function security audit?▼

Yes, you need a Supabase URL to perform an Edge Function security audit. The testing process requires this endpoint to discover deployed functions and analyze their authentication and authorization controls.

How do I check my Supabase Edge Functions for IDOR vulnerabilities?▼

Checking for IDOR vulnerabilities in Supabase Edge Functions requires analyzing authorization controls to verify that users cannot access or manipulate other users' resources through insecure function endpoints.

Can I automatically discover all deployed Supabase Edge Functions for penetration testing?▼

Yes, you can automatically discover all deployed Supabase Edge Functions within your project to assess their authentication mechanisms, input validation, and authorization controls for potential security risks.

Related Skills

Explore More Software Engineering Skills→
gil00pitagil00pita

supabase-db

Provides PostgreSQL backend with real-time subscriptions and Row Level Security for Supabase apps.

Community
Intermediate
florianbuetowflorianbuetow
12

privilege-escalation

Analyzes source code for privilege escalation threats and vulnerabilities.

Community
Advanced
cwinvestmentscwinvestments
412

memstack-security-rls-checker

Audit Supabase Row Level Security policies across all tables.

Community
Intermediate
uphiagouphiago
1.1k

hunt-fastapi

Detect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.

Community
Intermediate