supabase-automation

SUSPICIOUS. The skill's Supabase-focused capabilities mostly match its stated purpose, but it routes sensitive Supabase admin operations and possible credentials through Composio/Rube instead of Supabase's official MCP, and its setup points to a discontinued endpoint. This is more a trust and data-routing concern than confirmed malware.