supabase

Warn

Audited by Socket on Aug 18, 2026

1 alert found:

Security
SecurityMEDIUM
templates/rls-policy-template.sql

No evidence of malicious code execution, exfiltration, backdoors, or obfuscation is present; this is RLS policy SQL. However, the authorization controls include two major permissiveness hazards: an INSERT policy that effectively allows any authenticated user to insert arbitrary rows (WITH CHECK true under role authenticated), and a public read policy that allows unrestricted SELECT to anon/authenticated (USING true). These issues can lead to severe confidentiality and integrity impact if the table contains sensitive or tenant-scoped data or if the template is applied broadly.

Confidence: 70%Severity: 82%
Audit Metadata
Analyzed At
Aug 18, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/nth5693%2Fgemini-kit%2Fsupabase%2F@066dfdbba918b3636994d0a08ea50b9e07722ddf7055eba4e739ffb625a80a26
Security Audit — socket — supabase