supabase
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides security-hardened guidance for Supabase development, including best practices for Row Level Security (RLS) and identity management.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from official Supabase domains (supabase.com) and GitHub repositories (github.com/supabase), which are recognized as well-known technology services.
- [COMMAND_EXECUTION]: Instructions are provided for the Supabase CLI to manage database schemas and migrations, with explicit directions to verify commands using the --help flag.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as documentation and tool outputs (Ingestion points). It does not specify formatting boundary markers (Boundary markers), but it possesses capabilities for CLI and SQL execution (Capability inventory). Mitigation is provided via explicit instructions in the 'Anti-Patterns' section to disregard instructions embedded in external data (Sanitization).
Audit Metadata