nextjs-supabase

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose is a Next.js + Supabase starter, but the cited GitHub source currently redirects to a different Next.js + Turso template, and the npm/pnpm mismatch further weakens trust. No clear credential exfiltration or malicious data routing is shown, but the install source is inconsistent enough to make the skill unreliable and medium risk.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:09 PM
Package URL
pkg:socket/skills-sh/rebyteai-template%2Frebyte-skills%2Fnextjs-supabase%2F@a774e59837d4a21d417aa3265267fb24894be3de74e78738373fec4daf025364