supabase-android

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a library of security-conscious code templates and rules. It specifically instructs developers to use git-ignored local.properties for API keys and warns against including the service_role key in client-side code.
  • [SAFE]: The database interaction patterns correctly emphasize the use of Supabase's Row Level Security (RLS) to prevent unauthorized cross-user data access.
  • [SAFE]: The Edge Function templates include robust authentication verification (JWT validation) and input validation prior to performing business logic or consuming quotas.
  • [SAFE]: Storage implementation rules enforce user-specific file paths (e.g., users/$userId/), which is a critical security measure to prevent unauthorized file access or overwrites.
  • [SAFE]: The skill uses well-known, legitimate dependencies from established repositories (io.github.jan-tennert.supabase, io.ktor).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:16 PM