integrating-supabase

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists of instructional content and code snippets designed to teach developers how to use official Supabase libraries correctly. No malicious patterns, obfuscation, or unauthorized access attempts were detected.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates how to configure API keys using descriptive placeholders and provides strong architectural guidance to prevent credential leakage.
  • Evidence: Placeholders such as YOUR_SUPABASE_SERVICE_ROLE_KEY and YOUR_SUPABASE_ANON_KEY are used in code examples across references/setup.md and references/serverpod-mini.md.
  • Security Context: The skill explicitly warns that the SERVICE_ROLE_KEY must never be embedded in client-side code as it bypasses database security rules.
  • [EXTERNAL_DOWNLOADS]: The skill references established, well-known libraries and official service documentation.
  • Evidence: Mentions of supabase_flutter, google_sign_in, and sign_in_with_apple packages, along with links to the official supabase.com domain.
  • Context: All referenced resources are industry-standard tools for the specified Flutter integration task.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 04:10 PM