stash-supabase
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The instructions guide the user to utilize the vendor's CLI tool (
npx stash) and standard package managers (npm,npx) for installation and initialization. These are standard operational procedures for the CipherStash ecosystem. - [CREDENTIALS_UNSAFE]: The skill provides guidance on managing authentication using environment variables (
CS_*) and the~/.cipherstashdirectory. These practices are documented as standard methods for service-level and device-level authentication within the vendor's secure framework. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of external data from Supabase database tables for encryption and decryption operations.
- Ingestion points: Data retrieved from Supabase table columns mapped to EQL domains.
- Boundary markers: Data processing is delimited by the
encryptedSupabasewrapper and native EQL v3 column domains. - Capability inventory: Includes database queries, encryption/decryption tasks, and identity-aware lock contexts.
- Sanitization: Employs field-level encryption to protect sensitive data before it is persisted or queried.
Audit Metadata