magma-dashboard
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the official Supabase Root CA certificate (prod-ca-2021.crt) from a remote resource managed by Supabase. This certificate is required to establish secure and verified SSL connections to the database instance, following industry-standard security practices for production data environments. \n- [COMMAND_EXECUTION]: The instructions involve the use of standard development tools such as npm and npx to scaffold the Evidence.dev project and manage data sources. These commands are typical for the framework and are executed locally within the project context. \n- [SAFE]: The skill demonstrates a proactive security posture by explicitly directing the user to store credentials in a .env file and prohibiting the disabling of SSL verification. No indicators of obfuscation, persistence, privilege escalation, or malicious command execution were found.
Audit Metadata