supabase-typegen-generate

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Command Execution]: The skill uses the standard Supabase CLI (supabase gen types) and Dart tooling (dart pub, dart run). These commands are essential for the skill's primary purpose of synchronizing database schemas with code types.
  • [External Downloads]: The skill instructs the user to add the supabase_typegen package as a development dependency. This package is an official component of the Supabase ecosystem and is fetched from the standard Dart package registry (pub.dev).
  • [Indirect Prompt Injection Surface]: The skill processes external data in the form of a database schema to generate source code. While this represents an ingestion point for potentially untrusted data (e.g., malicious table or column names), this is the intended functionality of a type generator. The risk is mitigated by the fact that the underlying tools are designed for this purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 10:29 AM