supabase
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill contains standard documentation and code snippets for integrating with the Supabase platform.
- [CREDENTIALS_SAFE]: The skill uses generic placeholders for sensitive information such as 'your-anon-key' and 'your-service-role-key'. It explicitly warns that the Service Role Key should never be exposed to the client as it bypasses Row Level Security (RLS), which is a standard security best practice.
- [EXTERNAL_DOWNLOADS]: The skill references official Supabase documentation and dashboard URLs (supabase.com), which are well-known and trusted services.
- [COMMAND_EXECUTION]: The provided CLI commands (e.g., 'supabase init', 'supabase start') are standard development tools for the platform and do not involve suspicious execution patterns or remote script piping.
Audit Metadata