pp-supabase

SUSPICIOUS: the skill’s Supabase-focused capabilities mostly match its purpose, but it requires trust in a custom third-party CLI that handles privileged Supabase credentials and can route results to arbitrary webhooks. The main concern is install/provenance trust plus outbound delivery features, not obvious hidden malware behavior.