supabase-evidence

Initialize and manage the .sb-pentest-evidence directory with structured subfolders and templates.

62|3|Updated Jan 31, 2026

Search Tags:#timeline #security #audit #compliance #supabase #evidence #evidence-management

Ready to run

npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-evidence

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: supabase-evidence
Source: https://github.com/yoanbernabeu/supabase-pentest-skills/tree/main/skills/evidence/supabase-evidence
Command: npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-evidence

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill initializes and manages the evidence collection system for professional security audits, ensuring structured, auditable proof of findings from start to finish.

Core Features & Use Cases

Progressive evidence collection: save evidence immediately after each step to support reproducibility.
Evidence directory structure: creates and maintains .sb-pentest-evidence with categorized subfolders for detection, extraction, api-audit, storage-audit, auth-audit, realtime-audit, and function-tests.
Audit readiness and compliance: provides templates and references (curl commands, timelines, and JSON evidence) to support thorough reporting and compliance.

Quick Start

Initialize evidence collection for an audit by running the skill in your audit directory. The skill will establish the .sb-pentest-evidence directory and the required subfolders, and prepare templates for evidence files, curl commands, and timelines.

Frequently Asked Questions about supabase-evidence

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I organize audit evidence for a Supabase security assessment?▼

Audit evidence is organized by initializing a structured directory that enforces progressive saving of artifacts. This creates categorized subfolders for detection, extraction, and specific audit phases to ensure reproducible proof of findings.

What is progressive evidence collection in security audits?▼

Progressive evidence collection in security audits is the practice of saving audit proof immediately after each testing step. It supports reproducibility by ensuring structured artifacts are captured throughout all phases rather than compiled retroactively.

How do I structure findings for compliance and audit readiness?▼

To structure findings for compliance and audit readiness, use standardized subfolders and templates for curl commands, timelines, and JSON evidence. This ensures all security audit artifacts are categorized and auditable from start to finish.

Can I use a standardized directory structure for Supabase API and storage audits?▼

Yes, you can use a standardized directory structure for Supabase API and storage audits. The system creates dedicated subfolders for api-audit, storage-audit, auth-audit, and realtime-audit to maintain organized evidence.

Do I need templates for curl commands and timelines when collecting security evidence?▼

Yes, using templates for curl commands and timelines is necessary when collecting security evidence. They provide standardized references that support thorough reporting, compliance, and the reproducibility of your audit findings.