supabase-typegen-generate
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill uses the standard Supabase CLI (
supabase gen types) and Dart tooling (dart pub,dart run). These commands are essential for the skill's primary purpose of synchronizing database schemas with code types. - [External Downloads]: The skill instructs the user to add the
supabase_typegenpackage as a development dependency. This package is an official component of the Supabase ecosystem and is fetched from the standard Dart package registry (pub.dev). - [Indirect Prompt Injection Surface]: The skill processes external data in the form of a database schema to generate source code. While this represents an ingestion point for potentially untrusted data (e.g., malicious table or column names), this is the intended functionality of a type generator. The risk is mitigated by the fact that the underlying tools are designed for this purpose.
Audit Metadata