supabase-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or referenced files.
- [COMMAND_EXECUTION]: The skill uses standard development tools such as
npm,pip,git, andgrepto perform environment checks, install packages, and search for code patterns requiring migration. - [EXTERNAL_DOWNLOADS]: Fetches updates for
@supabase/supabase-js,@supabase/ssr, and the Supabase CLI from official registries. These are official resources from a well-known service provider. - [DYNAMIC_CONTEXT_INJECTION]: Employs the
!syntax inSKILL.mdto run informational commands (npm list,supabase --version,pip show) that display the current environment state when the skill is loaded. - [INDIRECT_PROMPT_INJECTION]: The skill scans local source code using
grepto find Supabase usage patterns. Ingestion points: Files insrc/,lib/, andapp/are read bygrepinSKILL.md. Boundary markers: None explicitly used to delimit code content within the agent's context. Capability inventory: Includes package installation (npm,pip), type generation (npx), and test execution (npm test,pytest) inSKILL.md. Sanitization: None observed for the code content being read.
Audit Metadata