CCM
/Skills
SkillsMCPMarketplacesDigestToolsAdvertise

This week in Claude

Every Monday: Claude Code, Agent SDK, MCP, and the Anthropic platform moves worth your time.

Skills by Category
Frontend DevelopmentBackend & APIsTesting & QASecurityDevOps & CI/CDGit & Pull RequestsDocumentationCode Review & QualityAI & Agent BuildingSkill Development
MCP Servers by Category
Sales & MarketingWeb & Browser AutomationDatabasesAI & LLM ToolsCloud & InfrastructureCommunication & MessagingDeveloper ToolsDesign & CreativeDocuments & KnowledgeSearch & Web Crawling
Marketplaces by Category
AI Agents & OrchestrationLLM IntegrationDevelopment ToolsFrontend & UIBackend & APIsDatabasesTesting & Code QualityDevOps & CloudSecurity & ComplianceGit & Version Control

Claude Code Marketplaces

Discover Claude Code plugins, extensions, and tools. Automatically updated directory of Anthropic Claude AI marketplaces with development tools, productivity plugins, and integrations.

Resources

  • Browse Skills
  • Browse MCP Servers
  • Browse Marketplaces
  • Skill index
  • MCP index
  • Marketplace index
  • Plugins Reference

Community

  • About
  • Tools
  • Feedback
  • Privacy Policy
  • Advertise

Built for the Claude Code community with Claude Code by mertbuilds.com

Independent project, not affiliated with Anthropic
yoanbernabeu avatar

Supabase Audit Tables Read

yoanbernabeu/supabase-pentest-skills
358 installs60 stars
Summary

Tests whether you can actually read data from your Supabase tables using the anon key, then tells you exactly what's exposed. After listing tables, it runs SELECT queries to pull sample rows and flags anything sensitive like emails, API keys, or financial data. The output groups tables by severity (P0 for secrets and PII, P1 for partial exposure) and shows you exactly which columns are leaking. Worth running this before you realize someone's been scraping your users table for six months. It writes findings progressively to context files so you don't lose results if something crashes mid-test.

Install to Claude Code

npx -y skills add yoanbernabeu/supabase-pentest-skills --skill supabase-audit-tables-read --agent claude-code

Installs into .claude/skills of the current project.

CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
inference shell
inference shell
create and run specialised agents in minutes
build now →
MCP-ready Email SendingMCP-ready Email Sending
MCP-ready Email Sending
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Make your agent a DeFi expert
Make your agent a DeFi expert
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Capacitor - Shared memory for your team’s coding agents.
Capacitor - Shared memory for your team’s coding agents.
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
CodeScene MCP ServerCodeScene MCP Server
CodeScene MCP Server
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Give your AI the whole web as clean markdownGive your AI the whole web as clean markdown
Give your AI the whole web as clean markdown
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
inference shell
inference shell
create and run specialised agents in minutes
build now →
MCP-ready Email SendingMCP-ready Email Sending
MCP-ready Email Sending
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Make your agent a DeFi expert
Make your agent a DeFi expert
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Capacitor - Shared memory for your team’s coding agents.
Capacitor - Shared memory for your team’s coding agents.
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
CodeScene MCP ServerCodeScene MCP Server
CodeScene MCP Server
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Give your AI the whole web as clean markdownGive your AI the whole web as clean markdown
Give your AI the whole web as clean markdown
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Files
SKILL.md

Select a file.

Featured
CodeRabbit
CodeRabbit
AI writes the code. CodeRabbit catches the slop.
Try For Free →
inference shell
inference shell
create and run specialised agents in minutes
build now →
MCP-ready Email SendingMCP-ready Email Sending
MCP-ready Email Sending
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Make your agent a DeFi expert
Make your agent a DeFi expert
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Capacitor - Shared memory for your team’s coding agents.
Capacitor - Shared memory for your team’s coding agents.
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
CodeScene MCP ServerCodeScene MCP Server
CodeScene MCP Server
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Give your AI the whole web as clean markdownGive your AI the whole web as clean markdown
Give your AI the whole web as clean markdown
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt - the only tool your agent needs
belt - the only tool your agent needs
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Categories
Backend & APIsSecurityDatabases
First SeenJun 3, 2026
View on GitHub

More from yoanbernabeu/supabase-pentest-skills

All 23 skills →
  • Supabase Audit Auth Users357
  • Supabase Detect356
  • Supabase Extract Service Key356
  • Supabase Audit Buckets Public355
  • Supabase Extract Db String355
  • Supabase Audit Tables List354
  • Supabase Audit Buckets List353
  • Supabase Audit Buckets Read350
  • Supabase Report Compare347
  • Supabase Audit Auth Signup346
  • Supabase Extract Url345
  • Supabase Extract Jwt344
  • Supabase Audit Authenticated308
  • Supabase Audit Rls759
  • Supabase Pentest512
  • Supabase Audit Auth Config396
  • Supabase Audit Functions395
  • Supabase Audit Realtime385
  • Supabase Help382
  • Supabase Audit Rpc381
  • Supabase Report365
  • Supabase Extract Anon Key359

Recommended

More Backend & APIs →
secondsky avatar
api-error-handling

secondsky/claude-skills

Implements standardized API error responses with proper status codes, logging, and user-friendly messages. Use when building production APIs, implementing error recovery patterns, or integrating error monitoring services.
357
204
davila7 avatar
geo-database

davila7/claude-code-templates

Access NCBI GEO for gene expression/genomics data. Search/download microarray and RNA-seq datasets (GSE, GSM, GPL), retrieve SOFT/Matrix files, for transcriptomics and expression analysis.
356
30.2k
yoanbernabeu avatar
supabase-extract-service-key

yoanbernabeu/supabase-pentest-skills

CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.
356
60
davila7 avatar
server-management

davila7/claude-code-templates

Server management principles and decision-making. Process management, monitoring strategy, and scaling decisions. Teaches thinking, not commands.
355
30.2k
yoanbernabeu avatar
supabase-audit-buckets-public

yoanbernabeu/supabase-pentest-skills

Identify storage buckets that are publicly accessible and may contain sensitive data.
355
60
yoanbernabeu avatar
supabase-audit-buckets-list

yoanbernabeu/supabase-pentest-skills

List all storage buckets and their configuration to identify the storage attack surface.
353
60