postgrest-baas-builder

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Provides secure-by-default SQL templates for database initialization and user profile management.
  • Includes explicit search_path settings for security definer functions to prevent search path attacks in assets/starter-migrations/0002_profiles.sql and references/auth.md.
  • Enforces Row Level Security (RLS) on all public tables with detailed policy examples and performance optimization guidelines.
  • Provides a security checklist for self-hosted instances to ensure default vendor credentials are replaced with strong, unique secrets.
  • [COMMAND_EXECUTION]: Contains instructional shell commands for configuring MCP servers and generating secure cryptographic keys.
  • references/self-hosted-on-zeabur.md provides a bash script for rotating JWT secrets and signing keys using openssl.
  • SKILL.md and references/insforge.md provide commands to add MCP tools using the claude mcp add syntax.
  • [EXTERNAL_DOWNLOADS]: References official vendor packages and well-known open-source libraries.
  • Uses npx -y @insforge/mcp@latest to install the vendor-specific MCP server for InsForge.
  • Recommends established libraries like github.com/golang-jwt/jwt/v5 and github.com/MicahParks/keyfunc/v3 for secure JWT handling in Go.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 04:47 AM
Security Audit — agent-trust-hub — postgrest-baas-builder