nextjs-supabase-auth
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional patterns for setting up Supabase authentication in a Next.js environment. All code snippets utilize standard environment variable placeholders (NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY) rather than hardcoded credentials. These specific keys are intended for public client-side use in the Supabase architecture.
- [SAFE]: The skill includes a 'Validation Checks' section that actively promotes security best practices, such as warning against the use of getSession() for authentication checks due to lack of JWT verification, and recommending getUser() instead.
- [SAFE]: The skill references the '@supabase/ssr' package, which is the official and well-known library provided by Supabase for server-side rendering support. No suspicious or unverified third-party dependencies were detected.
- [SAFE]: No patterns associated with prompt injection, data exfiltration, obfuscation, or unauthorized command execution were found in the instructions or code examples.
Audit Metadata