integrating-supabase
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and code snippets designed to teach developers how to use official Supabase libraries correctly. No malicious patterns, obfuscation, or unauthorized access attempts were detected.
- [CREDENTIALS_UNSAFE]: The skill demonstrates how to configure API keys using descriptive placeholders and provides strong architectural guidance to prevent credential leakage.
- Evidence: Placeholders such as
YOUR_SUPABASE_SERVICE_ROLE_KEYandYOUR_SUPABASE_ANON_KEYare used in code examples acrossreferences/setup.mdandreferences/serverpod-mini.md. - Security Context: The skill explicitly warns that the
SERVICE_ROLE_KEYmust never be embedded in client-side code as it bypasses database security rules. - [EXTERNAL_DOWNLOADS]: The skill references established, well-known libraries and official service documentation.
- Evidence: Mentions of
supabase_flutter,google_sign_in, andsign_in_with_applepackages, along with links to the officialsupabase.comdomain. - Context: All referenced resources are industry-standard tools for the specified Flutter integration task.
Audit Metadata