supabase-fullstack

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the official Supabase changelog and documentation from https://supabase.com/changelog.md and related documentation endpoints to ensure implementation matches the latest platform updates.
  • [COMMAND_EXECUTION]: Instructions include numerous Supabase CLI commands for project management, such as supabase db query, supabase migration new, and supabase config push. These are standard tools for the described workflow.
  • [DATA_EXFILTRATION]: The skill provides explicit guidance on avoiding credential exposure, specifically instructing the user to use .env files for secrets and warning against hardcoding API keys in application code (e.g., Flutter main.dart).
  • [SAFE]: Example credentials and URLs provided in the documentation (such as https://kqhyjngtquutzdvjfbnf.supabase.co and eyJhbG...6Bik) are explicitly labeled as examples or 'anti-patterns' to educate the developer on what to avoid.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 03:34 PM
Security Audit — agent-trust-hub — supabase-fullstack