supabase
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The instrumentation section in
SKILL.mdinstructs the agent to run a local script./scripts/log-skill.shto track usage of the skill. - [COMMAND_EXECUTION]: The debugging workflow in
workflows/debugging.mdrecommends using shell commands such ascat .env.local | grep SUPABASEandecho $NEXT_PUBLIC_SUPABASE_URLto verify the local development environment configuration. - [DATA_EXFILTRATION]: The skill includes instructions to read the
.env.localfile for debugging purposes. While this accesses sensitive configuration data, it is used locally for environment verification and no network exfiltration patterns were identified. - [SAFE]: The provided SQL templates and workflows emphasize security and reliability best practices, such as mandatory Row Level Security (RLS) enforcement, idempotent migration operations using
IF NOT EXISTSclauses, and the use of explicitWITH CHECKconstraints for write policies. - [SAFE]: The skill uses neutral, instructional language and does not contain any detected prompt injection attempts, obfuscation, or unauthorized persistence mechanisms.
Audit Metadata