skills.rest
marvinbiss
marvinbissCOMMUNITY
Explore all skills by this author →
GitHub

supabase-detect

Detect Supabase backend usage in web applications via client-side code and API endpoints.

Updated Jan 31, 2026
Search Tags:#backend#reconnaissance#security audit#supabase#detection#web application
One-click install
npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-detect-marvinbiss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase-detect
Source: https://github.com/marvinbiss/servicesartisans/tree/main/.cursor/skills/supabase-detect
Command: npx skills add https://github.com/marvinbiss/servicesartisans --skill supabase-detect-marvinbiss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill quickly identifies whether a web application is utilizing Supabase as its backend, streamlining the initial stages of security audits and reconnaissance.

Core Features & Use Cases

  • Multi-Vector Detection: Employs domain pattern matching, JavaScript client signatures, API endpoint analysis, and response header inspection.
  • Comprehensive Analysis: Covers standard Supabase domains, common client initialization patterns, and characteristic API paths.
  • Use Case: When starting a security assessment on a new web application, use this skill to confirm if Supabase is in use before proceeding with more targeted Supabase-specific tests.

Quick Start

Check if https://myapp.example.com uses Supabase.

Frequently Asked Questions about supabase-detect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect Supabase usage on a web application?▼

Detect Supabase usage by analyzing client-side code, network requests, and API endpoints. This skill identifies Supabase domains, JavaScript client libraries, characteristic API paths, and response headers to confirm backend presence.

What is the best way to check if a website uses Supabase for its backend?▼

Checking if a website uses Supabase involves multi-vector detection. This approach scans for standard Supabase domains, common JavaScript client initialization patterns, and specific API paths to accurately confirm backend integration.

Can I identify Supabase client libraries during a security audit?▼

Identifying Supabase client libraries is possible by analyzing JavaScript client signatures. The skill looks for characteristic client initialization patterns and standard domain references to verify Supabase usage during reconnaissance.

Does Supabase detection work by analyzing API endpoints and response headers?▼

Supabase detection works by comprehensively analyzing API endpoints and inspecting response headers. It combines this network request analysis with client-side code scanning to verify characteristic Supabase API paths.

When do I need Supabase detection for web application reconnaissance?▼

You need Supabase detection when starting a security assessment on a new web application. It streamlines initial reconnaissance by confirming if Supabase is in use before proceeding with more targeted Supabase-specific tests.

What are the limitations of detecting Supabase backend usage?▼

Limitations of detecting Supabase backend usage depend on visible client-side code and network requests. If API endpoints are heavily proxied or client libraries are obfuscated, characteristic Supabase domains and signatures may be hidden.

Related Skills

Explore More Software Engineering Skills→
marvinbissmarvinbiss

supabase-extract-url

Extract Supabase project URLs and API endpoints from client-side code.

Community
Intermediate
kobogithubkobogithub

security-owasp-zap

Run OWASP ZAP baseline, API, and full scans against FastAPI and Supabase endpoints.

Community
Advanced
hendrax5hendrax5

phase-6-ui-integration

Implement frontend UI and integrate it with backend APIs.

Community
Intermediate
uphiagouphiago
1.1k

firebase-supabase-attack

Probe Firebase and Supabase backends for publicly exposed data.

Community
Advanced