supabase-automation

SUSPICIOUS. The skill’s Supabase capabilities fit its stated purpose, but it routes sensitive admin actions, project data, and potentially credentials through a third-party MCP service tied to a discontinued Rube endpoint. That indirect data flow and remote trust dependency make the skill higher risk than a direct official Supabase integration.