Loading...
Loading...
Found 54 Skills
Identify storage buckets that are publicly accessible and may contain sensitive data.
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
Test for user enumeration vulnerabilities through various authentication endpoints.
Extract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.
List all storage buckets and their configuration to identify the storage attack surface.
Discover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
Everything to do with tests on HelpMeTest. Use when: writing tests for a new feature, generating tests for an existing feature, fixing a broken test, debugging a failing test, tests broke after a UI change, tests are out of date after a refactor. Triggers on: 'write tests', 'generate tests', 'test is failing', 'fix tests', 'tests broke', 'implement X', 'add feature', 'fix bug', 'why does this test fail', 'tests are out of date'. If it involves HelpMeTest tests in any way, this is the skill.
Attempt to list and read files from storage buckets to verify access controls.
Create a test user (with explicit permission) to audit what authenticated users can access vs anonymous users. Detects IDOR, cross-user access, and privilege escalation.
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.
Deep UI walkthrough with screenshot-based analysis across all pages and viewports (desktop + tablet + mobile). Delivers per-page improvement pitches grounded in what you actually see. Use when user says 'review the UI', 'pitch UI improvements', 'how does this look', 'UX audit', 'walk through the app'.