supabase
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill documents defensive coding practices and security boundaries for Supabase integration, such as keeping public environment contracts minimal and separating operator secrets from application configuration.
- [COMMAND_EXECUTION]: The instructions include standard development commands using
npx supabaseand local repository scripts (e.g.,./supabase/scripts/apply-hosted-migrations.sh) for linking projects, pushing database migrations, and deploying Edge Functions. These are standard operations for the Supabase development ecosystem. - [CREDENTIALS_UNSAFE]: The skill mentions sensitive credentials like
SUPABASE_ACCESS_TOKENandSUPABASE_DB_PASSWORDsolely to provide instructions on how to handle them securely, specifically advising that they should remain untracked and separate from the application's environment configuration.
Audit Metadata