菜单
Finds Supabase tables missing Row Level Security (RLS). Use when user says "check RLS", "are my tables secure", "find unprotected tables", or "audit table security". Generates read-only SQL queries for the Supabase SQL Editor.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Audits the overall API attack surface of a Supabase project including exposed tables, data volume, and role grants. Use when user says "how much is exposed", "audit API surface", "what can anon access", or "too many tables visible". Generates read-only SQL for the Supabase SQL Editor.
Audits Supabase authentication configuration including user status, MFA adoption, unconfirmed accounts, and auth hook security. Use when user says "check auth security", "MFA adoption", "unconfirmed users", "audit authentication", or "JWT security". Generates read-only SQL for the Supabase SQL Editor.
Reviews existing RLS policies on Supabase tables for gaps and misconfigurations. Use when user says "review my policies", "check RLS policies", "find permissive policies", or "why can anon write to my table". Generates read-only SQL for the Supabase SQL Editor.
Audits Supabase Realtime subscriptions for data leaks including tables without RLS broadcasting changes. Use when user says "check Realtime security", "who can see my Realtime data", "audit subscriptions", or "Realtime leaking data". Generates read-only SQL for the Supabase SQL Editor.
Audits Supabase RPC functions for security risks including anon access, SECURITY DEFINER issues, and search_path vulnerabilities. Use when user says "check my functions", "which functions can anon call", "audit RPC security", or "SECURITY DEFINER risk". Generates read-only SQL for the Supabase SQL Editor.
Finds exposed sensitive columns like passwords, tokens, API keys, SSNs, and credit card numbers in Supabase tables. Use when user says "check for PII", "sensitive data exposed", "are passwords visible", or "audit column security". Generates read-only SQL for the Supabase SQL Editor.
| name | audit-rls |
| description | Finds Supabase tables missing Row Level Security (RLS). Use when user says "check RLS", "are my tables secure", "find unprotected tables", or "audit table security". Generates read-only SQL queries for the Supabase SQL Editor. |
| metadata | {"author":"PolicyCheck","version":"1.0.0"} |
Give the user the queries from references/queries.sql to paste into their Supabase SQL Editor.
After the user runs the queries, help them understand:
rls_enabled = false are fully exposed to anyone with the anon keyFor each unprotected table found, provide this template:
-- Replace <table_name> with actual table name
ALTER TABLE public.<table_name> ENABLE ROW LEVEL SECURITY;
ALTER TABLE public.<table_name> FORCE ROW LEVEL SECURITY;
-- Add policies immediately — without them, all access is blocked
Tell the user to run /audit-policies next to set up proper RLS policies.
Example 1: User says "Are my Supabase tables secure?"
rls_enabled = falseExample 2: User says "I enabled RLS but my app broke"
/audit-policiesQuery returns permission error:
No tables returned: