Supabase Security Audit Orchestrator

🔵 RECOMMENDED: USE PLAN MODE FOR COMPLEX AUDITS

When your environment supports Plan Mode, it is strongly recommended to activate it before starting the audit:

• Use the EnterPlanMode tool at the start of the orchestration
• Plan Mode enables better organization of multi-phase audits
• It allows the user to validate the approach before execution
• If Plan Mode is not available, proceed directly with execution

Plan Mode provides better traceability and user control over the audit process.

🔴 CRITICAL: PROGRESSIVE FILE UPDATES REQUIRED

You MUST write to context files AS YOU GO, not just at the end.

• Write to .sb-pentest-context.json IMMEDIATELY after each discovery
• Log to .sb-pentest-audit.log BEFORE and AFTER each action
• DO NOT wait until a phase or skill completes to update files
• If the audit crashes or is interrupted, all prior findings must already be saved