supabase-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executesupabaseCLI commands andpsqloperations. This is the intended and necessary behavior for a database migration tool, allowing for migration creation, status listing, and database schema pushing. - [EXTERNAL_DOWNLOADS]: The instructions direct the user to install official packages from the Supabase organization, specifically the
supabaseCLI and the@supabase/supabase-jsSDK vianpm. These are well-known, trusted industry tools. - [SAFE]: The skill explicitly promotes security best practices for PostgreSQL, such as enabling Row Level Security (RLS) and using
SECURITY DEFINERwith triggers appropriately. - [SAFE]: The code snippets for data backfilling and health checks use standard environment variable patterns (
process.env.SUPABASE_SERVICE_ROLE_KEY) for secret management without hardcoding sensitive credentials. - [SAFE]: All external links point to legitimate documentation (Supabase official docs) or vendor-owned resources associated with the author Jeremy Longshore (intentsolutions.io, tonsofskills.com, jeremylongshore.com).
Audit Metadata