supabase-auth
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known, official libraries from Supabase (@supabase/supabase-js and @supabase/ssr) via standard package managers. This is a routine and safe practice for third-party service integration.
- [COMMAND_EXECUTION]: Includes standard shell commands for package installation and for running the official Supabase CLI during local development. These commands are typical for the described development workflow.
- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variable placeholders (e.g., NEXT_PUBLIC_SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY) for all sensitive project configuration. It explicitly includes security best practices advising users to never expose the service role key in client-side code.
Audit Metadata