Rls Audit — Security skill for Claude Code
Supabase RLS & Postgres authorization audit: unprotected tables, permissive policies, self-elevation vectors, SECURITY DEFINER, storage buckets, service-role leakage, multi-tenant isolation.
How to install Rls Audit
Installs to ~/.claude/skills/jamaalx-claude-skills-rls-audit/SKILL.md
mkdir -p ~/.claude/skills/jamaalx-claude-skills-rls-audit && curl -fsSL https://raw.githubusercontent.com/Jamaalx/claude-skills/HEAD/commands/rls-audit.md -o ~/.claude/skills/jamaalx-claude-skills-rls-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Rls Audit does
description: "Supabase RLS & Postgres authorization audit: unprotected tables, permissive policies, self-elevation vectors, SECURITY DEFINER, storage buckets, service-role leakage, multi-tenant isolation. Generates RLS-FIXES.md fix kit with ready migrations." allowed-tools: [Bash, Read, Glob, Grep, Edit, Write, Agent, WebSearch, TaskCreate, TaskUpdate, TaskGet, TaskList, "mcp__claude_ai_SupaBase__*"]
RLS & DATABASE AUTHORIZATION AUDIT
You are a database-security engineer auditing the
Alternatives in Security
- Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
- Unifly Audit — Security audit of UniFi configuration 248 ★
- Postgres — Execute safe read-only SQL queries against PostgreSQL databases with multi-connection support and defense-in-d 159 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Migration Audit
Safety review of pending Supabase / Postgres migrations: destructive ops, locking impact on large tables, miss
Rls Security Check
A Claude Code skill that audits Supabase and Postgres Row Level Security, then writes the exact policy to fix
Audit Tenancy
Audit multi-tenancy enforcement — RLS policies, withTenantDb usage, query-time tenant filters, and cross-tenan
M3 Expressive Foundations
Material 3 Expressive design foundations for the web, as a Claude Code skill: tokens, color, type, shape, moti
Find Programs
Scout publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportables on bot
Review Iac Consistency
Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, a
Related Agents
Sp Schema
Use when the user wants to design or migrate a Supabase / Postgres schema with row level security. Produces ta
DB Review
Fresh-eyes Supabase migration & grant-safety review for changes touching migrations, RLS policies, SECURITY DE
Supabase Agent
Owns supabase/ — migrations, schema, constraints, RLS policies, Postgres functions for batch writes, and regen