api-supabase-routes
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The content is purely instructional and provides security-focused coding conventions. No malicious code or hidden instructions were found.
- [PROMPT_INJECTION]: The skill defines a surface for processing untrusted data via API requests (e.g.,
req.json()in SKILL.md). It mitigates potential Indirect Prompt Injection risks by mandating authentication checks and strict schema validation using Zod'ssafeParse()before any database operations occur. - [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill correctly instructs developers to scope database queries to the authenticated user using
.eq('user_id', ownerId)to prevent unauthorized cross-tenant access.
Audit Metadata