supabase-help

To perform a Supabase security audit, you can run the `/supabase-help` command to access a comprehensive reference of available audit skills, including detection, extraction, and specific commands for targeted security checks.

You can check for Supabase security misconfigurations across API, storage, and authentication layers. The reference details specific commands like `supabase-detect` and `supabase-audit-rls` to identify vulnerabilities and check Row Level Security policies.

To run a guided pentest for a Supabase web application, use the `supabase-pentest` command. This initiates a full guided audit workflow to identify and mitigate vulnerabilities within your Supabase architecture.

Yes, understanding Supabase architecture and common security misconfigurations is required. The reference provides command overviews and workflow suggestions, but users need existing architectural knowledge to effectively execute the security assessments.

The best way to find the right command is to run the `/supabase-help` command. It provides a centralized listing of all Supabase security audit skills, their specific purposes, and usage examples for rapid deployment.