supabase-pentest-skills

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs the agent to extract API keys, JWTs, service_role keys, and DB connection strings and store/emit them in context files, logs, evidence files, and generated curl commands, which requires outputting secret values verbatim (high exfiltration risk).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow performs “Detect Supabase usage from public URLs” and then “Extract all Supabase credentials from https://example.com”; this implies it fetches outsider-authored public web content (e.g., HTML/JS from the target site) and ingests it as readable text into the agent context for parsing/extraction.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)