@skene/database-skills
Pass
Audited by Gen Agent Trust Hub on Jun 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Node.js setup script (setup.js) and bash scripts (install.sh, reset.sh, smoke-test.sh) to automate database operations. It invokes commands like psql, supabase, chmod, and python3. This behavior is consistent with its stated purpose of managing database schemas and local development environments.
- [EXTERNAL_DOWNLOADS]: The initialization routine executes npm install to ensure the package and its dependencies are available in the local project. It also references official GitHub repositories for installation instructions.
- [SAFE]: The SQL migrations include comprehensive Row-Level Security (RLS) policies that enforce multi-tenant isolation. These policies utilize Supabase's auth.uid() and custom helper functions to ensure data is strictly scoped to the user's organization, adhering to industry security standards for SaaS backends.
Audit Metadata