supabase-audit-buckets-read

SUSPICIOUS: the skill is internally coherent for a Supabase storage pentest and does not show malware-like exfiltration or supply-chain abuse, but it grants an AI agent real offensive security capability to enumerate and sample sensitive files, with persistent evidence capture and some transitive skill trust.