supabase-realtime
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a pre-compiled binary (websocat) from an external third-party GitHub repository (github.com/vi/websocat).
- [REMOTE_CODE_EXECUTION]: The installation process involves downloading binary content, granting it execution permissions via chmod +x, and preparing it for execution.
- [PRIVILEGE_ESCALATION]: The skill uses sudo to move a downloaded third-party binary into the system-level /usr/local/bin/ directory, which requires administrative access and modifies global system paths.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a WebSocket listener that ingests untrusted data from an external Supabase database.
- Ingestion points: WebSocket message processing in listen-to-changes.sh and process-changes.sh.
- Boundary markers: None identified; raw JSON output is piped directly into a processing loop.
- Capability inventory: Includes bash event handlers, jq parsing, and standard output capabilities.
- Sanitization: None; data from external database events is processed directly without validation or filtering.
Recommendations
- AI detected serious security threats
Audit Metadata