yoanbernabeu

Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.

Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.

Basic semantic code search with GrepAI. Use this skill to learn fundamental search commands and concepts.

Advanced search options in GrepAI. Use this skill for JSON output, compact mode, and AI agent integration.

Build complete call graphs with GrepAI trace. Use this skill for recursive dependency analysis.

Install and configure Ollama for local embeddings with GrepAI. Use this skill when setting up private, local embedding generation.

Find function callers with GrepAI trace. Use this skill to discover what code calls a specific function.

Tips and best practices for effective GrepAI searches. Use this skill to improve search result quality.

Find function callees with GrepAI trace. Use this skill to discover what functions a specific function calls.

Configure search result boosting in GrepAI. Use this skill to prioritize certain paths and penalize others.

Configure Ollama as embedding provider for GrepAI. Use this skill for local, private embedding generation.

Reference for all GrepAI MCP tools. Use this skill to understand available MCP tools and their parameters.

Supported programming languages in GrepAI. Use this skill to understand which languages can be indexed and traced.

Configure code chunking in GrepAI. Use this skill to optimize how code is split for embedding.

Orchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.

Initialize GrepAI in a project. Use this skill when setting up GrepAI for the first time in a codebase.

Configure and manage the GrepAI watch daemon. Use this skill for real-time code indexing and file monitoring.

Complete configuration reference for GrepAI. Use this skill when you need to understand all available configuration options.

Troubleshooting guide for GrepAI. Use this skill to diagnose and fix common issues.

Configure multi-project workspaces in GrepAI. Use this skill for monorepos and multiple related projects.

Configure ignore patterns in GrepAI. Use this skill when excluding files and directories from indexing.

Configure GOB local file storage for GrepAI. Use this skill for simple, single-machine setups.

Integrate GrepAI with Claude Code via MCP. Use this skill to enable semantic code search in Claude Code.

Integrate GrepAI with Cursor IDE via MCP. Use this skill to enable semantic code search in Cursor.

Get started with GrepAI in 5 minutes. Use this skill for a complete walkthrough from installation to first search.

Multi-platform installation guide for GrepAI. Use this skill when installing GrepAI on macOS, Linux, or Windows.

Configure Qdrant vector database for GrepAI. Use this skill for high-performance vector search.

Configure LM Studio as embedding provider for GrepAI. Use this skill for local embeddings with a GUI interface.

Configure OpenAI as embedding provider for GrepAI. Use this skill for high-quality cloud embeddings.

Configure PostgreSQL with pgvector for GrepAI. Use this skill for team environments and large codebases.

Analyze Supabase authentication configuration for security weaknesses and misconfigurations.

List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.

Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.

Quick reference for all Supabase security audit skills with usage examples and command overview.

Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.

Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.

Identify storage buckets that are publicly accessible and may contain sensitive data.

Test for user enumeration vulnerabilities through various authentication endpoints.

List all tables exposed via the Supabase PostgREST API to identify the attack surface.

Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.

Detect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.

CRITICAL - Detect if the Supabase servicerole key is leaked in client-side code. This is a P0 severity issue.

CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.