supabase
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/supabase.shscript uses theevalcommand to load environment variables from theenvironments.jsonconfiguration file. The implementation usesjq's@shfilter to ensure that all values are correctly escaped for the shell, preventing potential command injection from configuration data. - [EXTERNAL_DOWNLOADS]: The skill uses
curlto interact withapi.supabase.com. This network communication is necessary for the skill's primary function of executing SQL queries against Supabase projects and targets a well-known service domain. - [INDIRECT_PROMPT_INJECTION]: The skill processes JSON responses from SQL queries which could contain untrusted content. The
SKILL.mdfile includes explicit instructions for the agent to verify destructive actions and handle data cautiously, mitigating the risk of indirect injection. - Ingestion points: SQL query results received from the Supabase API in
scripts/supabase.sh. - Boundary markers: The agent is directed to use structured JSON output via
jqto interpret responses. - Capability inventory: Supabase SQL execution, local configuration file management, and authenticated network requests to the Supabase API.
- Sanitization: Results are parsed and formatted using
jq, ensuring consistent data structure for the agent.
Audit Metadata