Skip to content

Add supabase-security-audit skill#321

Open
MrTalhaMTS wants to merge 1 commit intoopenai:mainfrom
MrTalhaMTS:codex/add-supabase-security-audit
Open

Add supabase-security-audit skill#321
MrTalhaMTS wants to merge 1 commit intoopenai:mainfrom
MrTalhaMTS:codex/add-supabase-security-audit

Conversation

@MrTalhaMTS
Copy link
Copy Markdown

No description provided.

@MrTalhaMTS MrTalhaMTS requested a review from a team March 29, 2026 17:50
@MrTalhaMTS
Copy link
Copy Markdown
Author

supabase-security-audit is a Codex skill for securing Supabase and PostgreSQL applications. It helps review database schema, enforce Row Level Security across all tables, tighten policies, inspect privileged SQL, and catch app-side auth and secret-handling mistakes before they turn into real vulnerabilities.

The skill combines a practical audit workflow with reusable RLS policy patterns and a built-in static scanner. It can flag missing RLS, overly broad policies, unsafe SECURITY DEFINER functions, suspicious grants, client-exposed secrets, and weak authorization boundaries in server routes and storage flows.

It is designed for teams building multi-user Supabase apps who want faster security reviews, safer defaults, and concrete fixes instead of generic advice. Use it when you need to harden an existing schema, investigate unknown security issues, or add proper RLS and access control to a growing project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant