supabase-audit-auth-users

What problem does it solve?

This Skill identifies vulnerabilities in authentication flows that could allow attackers to determine if user accounts exist within a Supabase application.

Core Features & Use Cases

• User Enumeration Testing: Checks signup, login, password recovery, and OTP endpoints for information leakage.
• Vulnerability Identification: Detects enumeration via distinct error messages, response timing differences, or status codes.
• Use Case: Before deploying a new Supabase application, run this Skill to ensure that an attacker cannot easily discover valid user accounts, which could be used for targeted attacks or phishing.

Quick Start

Audit the Supabase authentication endpoints for user enumeration vulnerabilities.