supabase-extract-service-key
✓CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.
Installation
SKILL.md
🔴 CRITICAL: PROGRESSIVE FILE UPDATES REQUIRED You MUST write to context files AS YOU GO, not just at the end. Write to .sb-pentest-context.json IMMEDIATELY after each discovery Log to .sb-pentest-audit.log BEFORE and AFTER each action DO NOT wait until the skill completes to update files
If the skill crashes or is interrupted, all prior findings must already be saved This is not optional. Failure to write progressively is a critical error.
This skill detects if the servicerole key (admin key) is accidentally exposed in client-side code.
CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue. Source: yoanbernabeu/supabase-pentest-skills.
Facts (cite-ready)
Stable fields and commands for AI/search citations.
- Install command
npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-extract-service-key- Category
- !Security
- Verified
- ✓
- First Seen
- 2026-02-10
- Updated
- 2026-02-18
Quick answers
What is supabase-extract-service-key?
CRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue. Source: yoanbernabeu/supabase-pentest-skills.
How do I install supabase-extract-service-key?
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/yoanbernabeu/supabase-pentest-skills --skill supabase-extract-service-key Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code or Cursor
Where is the source repository?
https://github.com/yoanbernabeu/supabase-pentest-skills
Details
- Category
- !Security
- Source
- skills.sh
- First Seen
- 2026-02-10