supabase-load-scale
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
k6, a well-known open-source load testing tool, using standard system package managers such as Homebrew and APT. These are considered trusted sources for developer tooling. - [PRIVILEGE_ESCALATION]: Includes commands for software installation using
sudo apt install, which is a standard administrative action for installing packages on Linux systems. - [PERSISTENCE]: Utilizes
pg_cronto schedule database maintenance tasks, such as automated partition creation and old partition deletion. This is a standard administrative practice for managing large-scale PostgreSQL databases. - [INDIRECT_PROMPT_INJECTION]: The skill involves monitoring system metrics and database activity logs (e.g.,
pg_stat_activity). While this creates a potential surface for indirect prompt injection if malicious data were present in the logs, it is a standard and necessary practice for the skill's primary purpose of database scaling and monitoring. - Ingestion points:
getSystemMetrics()inreferences/examples.mdand database connection monitoring inreferences/connection-pooling.md. - Boundary markers: Not explicitly defined in the examples.
- Capability inventory: The skill uses
psqland thesupabaseCLI for database operations and project management. - Sanitization: No specific sanitization logic is provided for the collected metrics, as they are expected to be sourced from trusted system views.
Audit Metadata