supabase-detect

Name: supabase-detect
Availability: InStock
Author: marvinbiss

Detect Supabase backend usage in web applications via client-side code and API endpoints.

Updated Jan 31, 2026

Search Tags:#backend #reconnaissance #security audit #supabase #detection #web application

Ready to run

npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-detect-marvinbiss

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: supabase-detect
Source: https://github.com/marvinbiss/servicesartisans/tree/main/.cursor/skills/supabase-detect
Command: npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-detect-marvinbiss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill quickly identifies whether a web application is utilizing Supabase as its backend, streamlining the initial stages of security audits and reconnaissance.

Core Features & Use Cases

Multi-Vector Detection: Employs domain pattern matching, JavaScript client signatures, API endpoint analysis, and response header inspection.
Comprehensive Analysis: Covers standard Supabase domains, common client initialization patterns, and characteristic API paths.
Use Case: When starting a security assessment on a new web application, use this skill to confirm if Supabase is in use before proceeding with more targeted Supabase-specific tests.

Quick Start

Check if https://myapp.example.com uses Supabase.

Frequently Asked Questions about supabase-detect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect Supabase usage on a web application?▼

Detect Supabase usage by analyzing client-side code, network requests, and API endpoints. This skill identifies Supabase domains, JavaScript client libraries, characteristic API paths, and response headers to confirm backend presence.

What is the best way to check if a website uses Supabase for its backend?▼

Checking if a website uses Supabase involves multi-vector detection. This approach scans for standard Supabase domains, common JavaScript client initialization patterns, and specific API paths to accurately confirm backend integration.

Can I identify Supabase client libraries during a security audit?▼

Identifying Supabase client libraries is possible by analyzing JavaScript client signatures. The skill looks for characteristic client initialization patterns and standard domain references to verify Supabase usage during reconnaissance.

Does Supabase detection work by analyzing API endpoints and response headers?▼

Supabase detection works by comprehensively analyzing API endpoints and inspecting response headers. It combines this network request analysis with client-side code scanning to verify characteristic Supabase API paths.

When do I need Supabase detection for web application reconnaissance?▼

You need Supabase detection when starting a security assessment on a new web application. It streamlines initial reconnaissance by confirming if Supabase is in use before proceeding with more targeted Supabase-specific tests.

What are the limitations of detecting Supabase backend usage?▼

Limitations of detecting Supabase backend usage depend on visible client-side code and network requests. If API endpoints are heavily proxied or client libraries are obfuscated, characteristic Supabase domains and signatures may be hidden.