nextjs-supabase
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated purpose is a Next.js + Supabase starter, but the cited GitHub source currently redirects to a different Next.js + Turso template, and the npm/pnpm mismatch further weakens trust. No clear credential exfiltration or malicious data routing is shown, but the install source is inconsistent enough to make the skill unreliable and medium risk.
Confidence: 89%Severity: 58%
Audit Metadata