supabase-backend
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill emphasizes security as its core mental model, providing explicit instructions on enabling Row Level Security (RLS) for all database tables to prevent unauthorized data exposure.
- [SAFE]: It provides clear warnings regarding credential management, distinguishing between the safe
anonkey (intended for client-side use) and the dangerousservice_rolekey (which bypasses RLS and must never be exposed to the frontend). - [SAFE]: The skill includes a 'Verify it worked' checklist that encourages security auditing, such as checking for tables with RLS disabled and ensuring folder-level isolation in storage buckets.
- [SAFE]: Code examples for Edge Functions use well-known Deno standard libraries and follow best practices for server-side logic execution.
- [SAFE]: It promotes a secure migration workflow using the CLI instead of the dashboard, which helps maintain consistency and version control for the database schema.
Audit Metadata