supabase-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file utilizes dynamic context injection (the ! syntax) to inspect the local environment. Specifically, it executes npm list, supabase --version, and pip show to display current package versions to the agent at load time. These commands are benign and align with the skill's purpose of version auditing.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the latest Supabase packages via standard package managers (NPM, PyPI). It references official Supabase documentation and GitHub repositories (supabase.com, github.com/supabase/*), which are well-known and trusted services.
  • [COMMAND_EXECUTION]: The instructions include standard development commands for code auditing (grep), package management (npm install, pip install), and Supabase-specific CLI tasks (supabase gen types, supabase db diff). These operations are restricted to the local development environment and the project's codebase as part of a legitimate migration workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 01:20 AM
Security Audit — agent-trust-hub — supabase-upgrade-migration