supabase-fullstack
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the official Supabase changelog and documentation from
https://supabase.com/changelog.mdand related documentation endpoints to ensure implementation matches the latest platform updates. - [COMMAND_EXECUTION]: Instructions include numerous Supabase CLI commands for project management, such as
supabase db query,supabase migration new, andsupabase config push. These are standard tools for the described workflow. - [DATA_EXFILTRATION]: The skill provides explicit guidance on avoiding credential exposure, specifically instructing the user to use
.envfiles for secrets and warning against hardcoding API keys in application code (e.g., Fluttermain.dart). - [SAFE]: Example credentials and URLs provided in the documentation (such as
https://kqhyjngtquutzdvjfbnf.supabase.coandeyJhbG...6Bik) are explicitly labeled as examples or 'anti-patterns' to educate the developer on what to avoid.
Audit Metadata