supabase-load-scale

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing k6, a well-known open-source load testing tool, using standard system package managers such as Homebrew and APT. These are considered trusted sources for developer tooling.
  • [PRIVILEGE_ESCALATION]: Includes commands for software installation using sudo apt install, which is a standard administrative action for installing packages on Linux systems.
  • [PERSISTENCE]: Utilizes pg_cron to schedule database maintenance tasks, such as automated partition creation and old partition deletion. This is a standard administrative practice for managing large-scale PostgreSQL databases.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves monitoring system metrics and database activity logs (e.g., pg_stat_activity). While this creates a potential surface for indirect prompt injection if malicious data were present in the logs, it is a standard and necessary practice for the skill's primary purpose of database scaling and monitoring.
  • Ingestion points: getSystemMetrics() in references/examples.md and database connection monitoring in references/connection-pooling.md.
  • Boundary markers: Not explicitly defined in the examples.
  • Capability inventory: The skill uses psql and the supabase CLI for database operations and project management.
  • Sanitization: No specific sanitization logic is provided for the collected metrics, as they are expected to be sourced from trusted system views.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:49 AM