Supabase Audit Auth Signup

Tests your Supabase signup flow for common security holes like whether disposable emails get through, if weak passwords are accepted, and whether responses leak information about existing users. It checks rate limiting, password policies, and email validation, then flags issues by priority. You'd run this during an auth security audit or when setting up a new project to catch misconfigurations before they become problems. The progressive logging requirement is aggressive but makes sense since you want findings saved even if testing gets interrupted mid-run. Most useful when you need specific evidence about what's actually being accepted at the registration endpoint rather than just assuming your auth config is locked down.

Install to Claude Code

npx -y skills add yoanbernabeu/supabase-pentest-skills --skill supabase-audit-auth-signup --agent claude-code