pp-supabase

Pass

Audited by Gen Agent Trust Hub on Jul 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the supabase-pp-cli binary using npx from the @mvanhorn/printing-press-library package or go install from the vendor's GitHub repository (github.com/mvanhorn/printing-press-library).
  • [COMMAND_EXECUTION]: Operates by executing a local binary named supabase-pp-cli to perform administrative tasks, including fetching project data and managing database branches.
  • [DATA_EXFILTRATION]: Includes a --deliver webhook:<url> feature that allows output data—which may contain sensitive information like user emails, secret names, and project configurations—to be transmitted to a remote server specified at runtime.
  • [PROMPT_INJECTION]:
  • Ingestion points: Processes data from the Supabase Management API, such as user email addresses (auth-admin lookup) and database schemas (pgrst schema).
  • Boundary markers: None. Data returned from API calls is processed without protective delimiters or instructions to ignore embedded commands.
  • Capability inventory: Executes shell commands and has the ability to send data to external webhooks and delete project resources.
  • Sanitization: None. Data fetched from external sources is not sanitized before being returned to the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 19, 2026, 01:02 PM
Security Audit — agent-trust-hub — pp-supabase