supabase-self-hosted-docker-ubuntu

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to read secrets from .env and embed them directly into CLI commands and environment-variable values (e.g., POSTGRES_PASSWORD, ANON_KEY, SERVICE_ROLE_KEY, and Vercel tokens passed via --token or --value), which requires the LLM to handle and output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md requires cloning a public GitHub repo (git clone https://github.com/supabase/supabase.git) and running scripts from that repo (e.g., sh ./utils/generate-keys.sh --update-env), so untrusted third‑party content is fetched and directly influences execution.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). I flagged https://github.com/supabase/supabase.git because the skill instructs cloning that repository at runtime and then running its scripts and Docker Compose (e.g., sh ./utils/generate-keys.sh and docker compose up), so remote content is fetched, executed, and required for the skill to run.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). Flagged because the skill explicitly instructs system-level changes (apt-get installs, writing to /opt, generating secrets, and running docker compose to start services) which modify the host state and generally require elevated/sudo privileges.