Skill Store 33
Yoan Bernabeu

Yoan Bernabeu

@yoanbernabeu

51 skills · 94 GitHub stars

Website

Tech Lead Symfony & DevOps. J'écris, je filme et je forme sur trois sujets : architecture, DevOps, et IA appliquée au dev. Articles, vidéos, formations, et cons

Yoan Bernabeu is a Tech Lead focused on Symfony, DevOps and applying AI to software development, and his skills help agents with semantic code search and call tracing through GrepAI, including its configuration and Cursor integration. He also publishes a set of Supabase security audit skills covering authentication configuration review, Realtime channel testing, URL extraction from client code, evidence collection and report comparison. The range from developer tooling to structured security auditing is what stands out across his most popular skills.

Supabase Pentest Skills

24 skills · 74 stars · NOASSERTION

  • Supabase Audit Auth Config Analyze Supabase authentication configuration for security weaknesses and misconfigurations.
  • Supabase Audit Auth Signup Test if user signup is open and identify potential abuse vectors in the registration process.
  • Supabase Audit Auth Users Test for user enumeration vulnerabilities through various authentication endpoints.
  • Supabase Audit Authenticated Create a test user (with explicit permission) to audit what authenticated users can access vs ano…
  • Supabase Audit Buckets List List all storage buckets and their configuration to identify the storage attack surface.
  • Supabase Audit Buckets Public Identify storage buckets that are publicly accessible and may contain sensitive data.
  • Supabase Audit Buckets Read Attempt to list and read files from storage buckets to verify access controls.
  • Supabase Audit Functions Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
  • Supabase Audit Realtime Test Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.
  • Supabase Audit Rls Test Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.
  • Supabase Audit Rpc List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
  • Supabase Audit Tables List List all tables exposed via the Supabase PostgREST API to identify the attack surface.
  • Supabase Audit Tables Read Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
  • Supabase Detect Detect if a web application uses Supabase by analyzing client-side code, network patterns, and AP…
  • Supabase Evidence Initialize and manage the evidence collection directory for professional security audits with doc…
  • Supabase Extract Anon Key Extract the Supabase anon/public API key from client-side code.
  • Supabase Extract Db String CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code.
  • Supabase Extract Jwt Extract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.
  • Supabase Extract Service Key CRITICAL - Detect if the Supabase service_role key is leaked in client-side code.
  • Supabase Extract Url Extract the Supabase project URL from client-side JavaScript code, environment variables, and con…
  • Supabase Help Quick reference for all Supabase security audit skills with usage examples and command overview.
  • Supabase Pentest Orchestrate a complete Supabase security audit with guided step-by-step execution and ownership c…
  • Supabase Report Generate a comprehensive Markdown security audit report with executive summary, findings, and rem…
  • Supabase Report Compare Compare two security audit reports to track remediation progress and identify new vulnerabilities.

Grepai Skills

27 skills · 20 stars · MIT