supabase-audit-rpc

What problem does it solve?

This Skill helps security engineers identify vulnerabilities in Supabase PostgreSQL RPC functions, including potential RLS bypass, insecure definer rights, and unsafe dynamic behavior that could expose data.

Core Features & Use Cases

• RPC discovery: Enumerate exposed PostgreSQL RPC functions and evaluate their security posture.
• RLS and auth testing: Verify that RPC calls respect Row Level Security and authenticated access controls.
• Risk assessment: Detect insecure patterns such as SECURITY DEFINER usage without proper checks or unsafe dynamic queries.
• Use Case: Run a full RPC audit against a Supabase project to surface critical vulnerabilities and guide remediation.

Quick Start

Run an RPC security audit against your Supabase project by invoking the audit flow on the target project's REST endpoint and reviewing the findings in the generated context and evidence files.