supabase-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard technical documentation and code templates for implementing RBAC in Supabase. It correctly identifies the need for service role keys to be kept on the server side and warns that the service role bypasses Row Level Security (RLS) by design.
- [DATA_EXPOSURE_EXFILTRATION]: No hardcoded credentials or sensitive data exfiltration patterns were detected. The skill properly demonstrates using
process.envfor Supabase URLs and API keys. - [COMMAND_EXECUTION]: The skill requests access to Supabase and PostgreSQL CLI tools (
supabase,psql,npx supabase), which are appropriate for the stated purpose of configuring database policies and authentication settings. - [EXTERNAL_DOWNLOADS]: The skill references the official
@supabase/supabase-jslibrary, which is a well-known and trusted package for the Supabase platform.
Audit Metadata