supabase

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Security
SecurityMEDIUM
templates/rls-policy-template.sql

No evidence of malicious code execution, exfiltration, backdoors, or obfuscation is present; this is RLS policy SQL. However, the authorization controls include two major permissiveness hazards: an INSERT policy that effectively allows any authenticated user to insert arbitrary rows (WITH CHECK true under role authenticated), and a public read policy that allows unrestricted SELECT to anon/authenticated (USING true). These issues can lead to severe confidentiality and integrity impact if the table contains sensitive or tenant-scoped data or if the template is applied broadly.

Confidence: 70%Severity: 82%
Audit Metadata
Analyzed At
Oct 18, 2026, 12:59 PM
Package URL
pkg:socket/skills-sh/salavender%2Fantigravity-compound-engineering-plugin%2Fsupabase%2F@81c65472fd7d9cf9ebb340d27dbcac6de46b0acd35042da9b75ab1a2d62c72db