supabase
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces robust safety checks, such as requiring user approval for all write operations and prohibiting the execution of UPDATE or DELETE statements that lack a WHERE clause.
- [DATA_EXFILTRATION]: Privacy is maintained by instructions that require the agent to mask sensitive fields like email addresses, phone numbers, and authentication tokens in query outputs by default.
- [EXTERNAL_DOWNLOADS]: The skill references official Supabase CLI tools, which are well-known and trusted in the industry for database operations.
- [INDIRECT_PROMPT_INJECTION]: The skill manages the surface of processing database content by implementing output limits and masking sensitive content, adhering to the mandatory evidence chain (Ingestion points: Database query results; Boundary markers: Default LIMIT 50; Capability inventory: execute_sql and apply_migration tools; Sanitization: Field-level masking).
Audit Metadata