supabase
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches an official installation script from
https://supabase.link/setup.sh. This domain is a well-known service endpoint managed by the Supabase project for short-linking and setup utilities. - [REMOTE_CODE_EXECUTION]: The
README.mdandreferences/self-hosting-deployment.mdfiles provide instructions to download and run a shell script (sh setup.sh). This is accompanied by a recommendation to manually inspect the script's contents (less setup.sh) prior to execution, which serves as a security control. - [COMMAND_EXECUTION]: The skill facilitates the use of the Supabase CLI, Docker Compose, and
psqlfor standard development operations such as database migrations, container management, and schema testing. These commands are legitimate within the context of the skill's purpose.
Audit Metadata