supabase-extract-url

Extract Supabase project URLs from JavaScript, environment variables, and configuration files.

62|3|Updated Jan 31, 2026

Search Tags:#supabase #environment-variables #security-audit #web-scraping #pattern-matching #url-extraction #client-code

Ready to run

npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-extract-url

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: supabase-extract-url
Source: https://github.com/yoanbernabeu/supabase-pentest-skills/tree/main/skills/extraction/supabase-extract-url
Command: npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-extract-url

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies where a Supabase project is used in a web application's codebase and extracts the exact project URL needed for further testing and auditing.

Core Features & Use Cases

URL Discovery: Detects Supabase usage across JS, HTML, and config files and extracts the project URL.
Audit Readiness: Provides endpoints and context to enable subsequent key extraction and API testing skills.
Use Case: During a security audit, run this skill to obtain the project URL before performing endpoint enumeration.

Quick Start

Run the skill in a repository or environment containing Supabase integration to retrieve the project URL and associated endpoints.

Frequently Asked Questions about supabase-extract-url

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find my Supabase project URL in a web application codebase?▼

To find a Supabase project URL, scan client-side JavaScript, environment variables, and configuration files using pattern matching to detect common URL representations and extract the exact project endpoint.

What is the best way to extract Supabase endpoints for a security audit?▼

Extracting Supabase endpoints for a security audit involves detecting Supabase usage across JS, HTML, and config files, then retrieving the project URL and associated endpoints to enable subsequent key extraction and API testing.

Can I identify Supabase URLs from environment variables without external tools?▼

Yes, you can identify Supabase URLs from environment variables and configuration structures without external tools by relying on pattern matching for common URL representations found in client code.

Does this URL extraction method work with client-side JavaScript and HTML files?▼

Yes, URL extraction works with client-side JavaScript and HTML files by applying pattern matching to discover Supabase usage and extract the exact project URL needed for further testing and auditing.

Why do I need to extract the Supabase project URL before an API audit?▼

Extracting the Supabase project URL is necessary before an API audit because it provides the exact endpoint context required to locate anon keys and perform follow-up API testing and endpoint enumeration.

Are there limitations to pattern matching for Supabase URL discovery?▼

Pattern matching for Supabase URL discovery relies on recognizing common URL representations and configuration structures, meaning highly obfuscated or non-standard URL formats in client code may not be detected.