auth-setup
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install official Supabase packages (
@supabase/ssrand@supabase/supabase-js) via the package manager. These are well-known libraries from a reputable service provider. - [COMMAND_EXECUTION]: The skill uses shell commands to install dependencies (
pnpm add) and inspect project files (grep,Read). These operations are aligned with the skill's primary purpose of project configuration and bootstrapping. - [CREDENTIALS_SAFE_PRACTICE]: The skill emphasizes secure handling of secrets, specifically instructing the user to never expose the
SUPABASE_SERVICE_ROLE_KEYto the browser and to avoid using theNEXT_PUBLIC_prefix for server-only environment variables. It correctly utilizes placeholders for project-specific credentials.
Audit Metadata