supabase-cli

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation instructions via official and well-known package registries (NPM, Homebrew, Scoop) and the official Supabase GitHub repository. These are documented as the standard and trusted sources for the CLI tool.
  • [COMMAND_EXECUTION]: The skill documents the use of the supabase CLI for local development and project management. This includes commands for starting Docker containers, running database migrations, and deploying functions, which are the primary intended operations.
  • [CREDENTIALS_UNSAFE]: While the documentation mentions sensitive files like ~/.supabase/access-token and .env, it does so to explain the tool's standard configuration and credential storage behavior. Examples include placeholder tokens and dummy keys for demonstration purposes, which do not pose a security risk.
  • [COMMAND_EXECUTION]: Linux installation instructions utilize sudo with standard system package managers (e.g., dpkg, rpm). This is standard procedure for installing system-wide binaries and is presented in a neutral, informative context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 05:29 PM