supabase-android
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a library of security-conscious code templates and rules. It specifically instructs developers to use git-ignored
local.propertiesfor API keys and warns against including theservice_rolekey in client-side code. - [SAFE]: The database interaction patterns correctly emphasize the use of Supabase's Row Level Security (RLS) to prevent unauthorized cross-user data access.
- [SAFE]: The Edge Function templates include robust authentication verification (JWT validation) and input validation prior to performing business logic or consuming quotas.
- [SAFE]: Storage implementation rules enforce user-specific file paths (e.g.,
users/$userId/), which is a critical security measure to prevent unauthorized file access or overwrites. - [SAFE]: The skill uses well-known, legitimate dependencies from established repositories (
io.github.jan-tennert.supabase,io.ktor).
Audit Metadata