supabase-audit-tables-read

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is internally coherent for Supabase exposure testing and uses official Supabase API endpoints, with no installer or third-party proxy. However, it gives an AI agent offensive database-audit capability and requires saving retrieved table samples to local evidence files, which can preserve sensitive data and creates meaningful security risk despite not showing clear malicious intent.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 14, 2026, 06:43 PM
Package URL
pkg:socket/skills-sh/yoanbernabeu%2Fsupabase-pentest-skills%2Fsupabase-audit-tables-read%2F@3e426871675accb016287a930a8d8e345cd98ce57fab227a01d50b9ec62bc7a3