supabase
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance, specifically warning against insecure patterns like using
user_metadatafor authorization, exposingservice_rolekeys, and misconfiguring Row Level Security (RLS). - [SAFE]: External downloads and references (e.g.,
supabase.com,github.com/supabase/*) target the official and well-known domains of the vendor, which is established as a trusted source. - [SAFE]: Command execution is limited to standard administrative tools like the Supabase CLI (
supabase --help,supabase db pull) and expected project maintenance tasks. - [SAFE]: The skill includes instructions for data handling and configuration that align with industry-standard secret management, such as using environment variables and avoiding hardcoded secrets.
Audit Metadata