supabase-audit-auth-users

skills-sh:yoanbernabeu_supabase-pentest-skills__supabase-audit-auth-users

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM

Secrecy instruction PROMPT_INJECTION_008

prompt-injection L348

Detects instructions to hide actions from the user

Don't reveal user

FIX

Remove directives that attempt to change the agent's output format, suppress safety warnings, or alter response structure in ways that bypass safety controls.

FP?

Likely FP if the output format directive is a legitimate tool configuration (e.g., return results as JSON) that does not suppress safety features.