The Agent Skills Directory

[SAFE]: The skill provides structured instructions and examples for performing security audits on Supabase Realtime features, such as Postgres changes, broadcast channels, and presence tracking.
[SAFE]: The requirement for progressive file updates in .sb-pentest-context.json and .sb-pentest-audit.log is a state-persistence mechanism intended to ensure that audit results are preserved if the process is interrupted.
[SAFE]: All file-system interactions are restricted to local audit logging and evidence collection within the project's evidence directory.
[SAFE]: Network communication patterns are limited to standard Supabase WebSocket endpoints for the purpose of testing the target project's security posture.

supabase-audit-realtime