skills.rest
SeniduRavihara
SeniduRaviharaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

supabase-audit-rls

Audit Supabase Row Level Security policies for bypass vulnerabilities.

Updated Aug 23, 2026
Search Tags:#rls#supabase#data-protection#security-audit#row-level-security#evidence-collection#bypass-testing
One-click install
npx skills add https://github.com/SeniduRavihara/construction.lk --skill supabase-audit-rls-seniduravihara
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase-audit-rls
Source: https://github.com/SeniduRavihara/construction.lk/tree/main/.agents/skills/supabase-audit-rls
Command: npx skills add https://github.com/SeniduRavihara/construction.lk --skill supabase-audit-rls-seniduravihara

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations. It helps teams ensure data protection in Supabase by auditing RLS implementations across tables and roles.

Core Features & Use Cases

  • Progressive, evidence-driven RLS testing across unauthenticated access, cross-user access, filter bypass, join exploitation, and RPC bypass scenarios.
  • Generates a detailed audit report with found vulnerabilities, recommended mitigations, and step-by-step SQL fixes.
  • Supports mandatory progressive context updates and structured evidence collection for compliance and traceability.

Quick Start

Audit RLS on your Supabase project by running the skill against your database and recording findings progressively.

Frequently Asked Questions about supabase-audit-rls

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Supabase RLS policies for data leakage vulnerabilities?▼

Testing RLS bypass vulnerabilities involves validating Supabase tables and roles against unauthenticated access, cross-user exposure, filter bypass, and join exploitation. This progressive testing identifies misconfigurations that could expose unprotected records.

What edge cases should I test for Row Level Security bypass in Supabase?▼

Row Level Security bypass testing should cover unauthenticated access, cross-user data exposure, filter bypass attempts, related table joins, and RPC bypass scenarios. Testing these edge cases ensures policies hold up against common exploitation vectors.

How do I generate an audit report for Supabase RLS misconfigurations?▼

Generate an RLS audit report by progressively testing policies and collecting structured evidence. The resulting report details found vulnerabilities, recommended mitigations, and step-by-step SQL fixes for compliance and traceability.

Can I test unauthenticated access and cross-user exposure in Supabase RLS?▼

Yes, you can test unauthenticated access and cross-user exposure by validating RLS protections across project tables and roles. This confirms policies restrict data access to authorized users only.

What is the best way to fix Supabase RLS filter bypass vulnerabilities?▼

The best way to fix RLS filter bypass vulnerabilities is to apply step-by-step SQL mitigations generated from audit findings. These targeted fixes harden policies against unauthorized access through related table joins and RPC bypasses.

Related Skills

Explore More Software Engineering Skills→
marvinbissmarvinbiss

supabase-audit-tables-read

Read Supabase tables to verify data exposure and RLS effectiveness.

Community
Intermediate
SomtechSolutionMAximeSomtechSolutionMAxime

audit-rls

Audit PostgreSQL tables for missing or misconfigured Row-Level Security policies.

Community
Advanced
ValyntValynt

supabase-migrations

Audit Supabase migrations for stubs, RLS policies, and idempotency.

Official
Advanced
edulazaroedulazaro
12

lc:livewire-audit

Scan Laravel Livewire and Volt components for common bugs and apply fixes.

Community
Advanced