nodeboot-starter-supabase
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes structured configuration data which represents a potential surface for indirect prompt injection.
- Ingestion points: Configuration parameters defined under the
integrations.supabaseblock inSKILL.md. - Boundary markers: None explicitly mentioned to delimit or sanitize configuration interpolation.
- Capability inventory: Full Supabase API access including database queries, authentication management, and storage uploads via the registered
SupabaseClient. - Sanitization: Relies on the internal validation mechanisms of the Node-Boot framework and the Supabase library.
- [SAFE]: The documentation and code snippets correctly use environment variable placeholders (
${SUPABASE_SERVICE_ROLE_KEY}) for sensitive credentials, which is a standard security best practice. - [SAFE]: All external references, including the GitHub repository
github.com/nodejs-boot/node-bootand the@nodeboot/starter-supabasepackage, are official vendor-owned resources for this skill.
Audit Metadata