firebase-supabase-attack

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

HIGH RISK. This is an offensive cloud-exploitation skill for AI agents, not a benign integration or audit helper. Its capabilities are intentionally geared toward unauthorized enumeration, account creation, data extraction, and data modification/deletion on Firebase and Supabase targets; TLS verification is disabled throughout, and the skill gives an agent direct means to act on live third-party systems.

Confidence: 97%Severity: 94%
Audit Metadata
Analyzed At
Jul 31, 2026, 04:51 PM
Package URL
pkg:socket/skills-sh/uphiago%2Frecon-skills%2Ffirebase-supabase-attack%2F@2a53747648464a4bff6149ec30e61dc461531ede03f59bd99a1c765e6159076f
Security Audit — socket — firebase-supabase-attack