yoanbernabeu

Compare two security audit reports to track remediation progress and identify new vulnerabilities.

Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.

Orchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.

Quick reference for all Supabase security audit skills with usage examples and command overview.

Extract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.

CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.

Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.

CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.

Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.

Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.

Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.

List all tables exposed via the Supabase PostgREST API to identify the attack surface.

List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.

Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.

Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.

Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.

Attempt to list and read files from storage buckets to verify access controls.

Identify storage buckets that are publicly accessible and may contain sensitive data.

List all storage buckets and their configuration to identify the storage attack surface.

Test for user enumeration vulnerabilities through various authentication endpoints.

Test if user signup is open and identify potential abuse vectors in the registration process.

Analyze Supabase authentication configuration for security weaknesses and misconfigurations.

Configure multi-project workspaces in GrepAI. Use this skill for monorepos and multiple related projects.

Configure and manage the GrepAI watch daemon. Use this skill for real-time code indexing and file monitoring.

Troubleshooting guide for GrepAI. Use this skill to diagnose and fix common issues.

Build complete call graphs with GrepAI trace. Use this skill for recursive dependency analysis.

Find function callers with GrepAI trace. Use this skill to discover what code calls a specific function.

Find function callees with GrepAI trace. Use this skill to discover what functions a specific function calls.

Configure Qdrant vector database for GrepAI. Use this skill for high-performance vector search.

Configure PostgreSQL with pgvector for GrepAI. Use this skill for team environments and large codebases.

Configure GOB local file storage for GrepAI. Use this skill for simple, single-machine setups.

Tips and best practices for effective GrepAI searches. Use this skill to improve search result quality.

Configure search result boosting in GrepAI. Use this skill to prioritize certain paths and penalize others.

Basic semantic code search with GrepAI. Use this skill to learn fundamental search commands and concepts.

Advanced search options in GrepAI. Use this skill for JSON output, compact mode, and AI agent integration.

Get started with GrepAI in 5 minutes. Use this skill for a complete walkthrough from installation to first search.

Install and configure Ollama for local embeddings with GrepAI. Use this skill when setting up private, local embedding generation.

Reference for all GrepAI MCP tools. Use this skill to understand available MCP tools and their parameters.

Integrate GrepAI with Cursor IDE via MCP. Use this skill to enable semantic code search in Cursor.

Integrate GrepAI with Claude Code via MCP. Use this skill to enable semantic code search in Claude Code.

Supported programming languages in GrepAI. Use this skill to understand which languages can be indexed and traced.

Multi-platform installation guide for GrepAI. Use this skill when installing GrepAI on macOS, Linux, or Windows.

Initialize GrepAI in a project. Use this skill when setting up GrepAI for the first time in a codebase.

Configure ignore patterns in GrepAI. Use this skill when excluding files and directories from indexing.

Configure OpenAI as embedding provider for GrepAI. Use this skill for high-quality cloud embeddings.

Configure Ollama as embedding provider for GrepAI. Use this skill for local, private embedding generation.

Configure LM Studio as embedding provider for GrepAI. Use this skill for local embeddings with a GUI interface.

Complete configuration reference for GrepAI. Use this skill when you need to understand all available configuration options.

Configure code chunking in GrepAI. Use this skill to optimize how code is split for embedding.