lovable-cloud-supabase-migration-chat

Warn

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [DATA_EXFILTRATION]: The skill reads and migrates highly sensitive data from the auth.users and auth.identities tables.\n
  • Evidence: Phase 4 (SKILL.md) explicitly instructs the agent to read encrypted_password hashes and identity data from the source and insert them into the destination database.\n- [COMMAND_EXECUTION]: The skill performs extensive administrative operations and script execution on the target database infrastructure.\n
  • Evidence: Phase 3 and Phase 5 utilize Supabase:apply_migration and Supabase:execute_sql to create schemas, triggers, and functions, and to batch insert row data.\n
  • Evidence: Phase 7 involves reading source code from edge functions and deploying it to the destination project using Supabase:deploy_edge_function.\n- [EXTERNAL_DOWNLOADS]: The skill deploys a temporary edge function that performs network operations to transfer files between cloud environments.\n
  • Evidence: The migrate-storage edge function template (found in references/trampas.md) uses the fetch API to download content from the source project's storage URLs before uploading them to the destination.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates the installation and execution of code from external repositories.\n
  • Evidence: The README.md recommends installation via npx skills add CarolMonroe22/lovable-cloud-to-supabase-migration-chat.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 12, 2026, 08:41 PM