skills/carolmonroe22/lovable-cloud-to-supabase-migration-chat/lovable-cloud-supabase-migration-chat/Gen Agent Trust Hub
lovable-cloud-supabase-migration-chat
Warn
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill reads and migrates highly sensitive data from the
auth.usersandauth.identitiestables.\n - Evidence: Phase 4 (SKILL.md) explicitly instructs the agent to read
encrypted_passwordhashes and identity data from the source and insert them into the destination database.\n- [COMMAND_EXECUTION]: The skill performs extensive administrative operations and script execution on the target database infrastructure.\n - Evidence: Phase 3 and Phase 5 utilize
Supabase:apply_migrationandSupabase:execute_sqlto create schemas, triggers, and functions, and to batch insert row data.\n - Evidence: Phase 7 involves reading source code from edge functions and deploying it to the destination project using
Supabase:deploy_edge_function.\n- [EXTERNAL_DOWNLOADS]: The skill deploys a temporary edge function that performs network operations to transfer files between cloud environments.\n - Evidence: The
migrate-storageedge function template (found in references/trampas.md) uses thefetchAPI to download content from the source project's storage URLs before uploading them to the destination.\n- [REMOTE_CODE_EXECUTION]: The skill facilitates the installation and execution of code from external repositories.\n - Evidence: The README.md recommends installation via
npx skills add CarolMonroe22/lovable-cloud-to-supabase-migration-chat.
Audit Metadata