supabase-auth
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (curl, jq, base64) and sources a local script file to manage API interactions.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates pattern where user-controlled variables (like tokens and emails) are interpolated into shell strings and JSON payloads. This presents a vulnerability surface where malicious input could lead to command or JSON injection.
- Ingestion points: Environment variables (SUPABASE_KEY) and shell variables (REFRESH_TOKEN, ACCESS_TOKEN, USER_ID).
- Boundary markers: Not implemented in the provided code snippets.
- Capability inventory: Network access via curl, JSON parsing with jq, and script execution via shell sourcing.
- Sanitization: No explicit sanitization or escaping of variables is demonstrated in the implementation examples.
Audit Metadata