supabase-postgres-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of informational markdown files and SQL code snippets. It does not include any scripts, executable binaries, or active logic.
- [EXTERNAL_DOWNLOADS]: The documentation references official resources from trusted organizations, including the PostgreSQL Global Development Group (postgresql.org) and Supabase (supabase.com). These references are used for standard documentation and technical guidance.
- [PROMPT_INJECTION]: The skill establishes an ingestion surface for untrusted data by instructing the agent to analyze and optimize user-provided SQL queries. 1. Ingestion points: SQL queries and schema designs provided by the user to the agent. 2. Boundary markers: None explicitly defined within the skill instructions. 3. Capability inventory: Not applicable to the skill itself, though the agent using it may possess file-system or database interaction tools. 4. Sanitization: The skill provides logic for optimization but does not include specific sanitization or escaping instructions for the agent to apply to the input SQL before analysis.
- [COMMAND_EXECUTION]: The documentation includes educational SQL templates for administrative tasks such as ALTER SYSTEM and GRANT. These are presented as static text templates for reference and are not executed by the skill itself.
Audit Metadata