pp-supabase
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
supabase-pp-clibinary usingnpxfrom the@mvanhorn/printing-press-librarypackage orgo installfrom the vendor's GitHub repository (github.com/mvanhorn/printing-press-library). - [COMMAND_EXECUTION]: Operates by executing a local binary named
supabase-pp-clito perform administrative tasks, including fetching project data and managing database branches. - [DATA_EXFILTRATION]: Includes a
--deliver webhook:<url>feature that allows output data—which may contain sensitive information like user emails, secret names, and project configurations—to be transmitted to a remote server specified at runtime. - [PROMPT_INJECTION]:
- Ingestion points: Processes data from the Supabase Management API, such as user email addresses (
auth-admin lookup) and database schemas (pgrst schema). - Boundary markers: None. Data returned from API calls is processed without protective delimiters or instructions to ignore embedded commands.
- Capability inventory: Executes shell commands and has the ability to send data to external webhooks and delete project resources.
- Sanitization: None. Data fetched from external sources is not sanitized before being returned to the agent's context.
Audit Metadata