postgrest-baas-builder
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Provides secure-by-default SQL templates for database initialization and user profile management.
- Includes explicit
search_pathsettings forsecurity definerfunctions to prevent search path attacks inassets/starter-migrations/0002_profiles.sqlandreferences/auth.md. - Enforces Row Level Security (RLS) on all public tables with detailed policy examples and performance optimization guidelines.
- Provides a security checklist for self-hosted instances to ensure default vendor credentials are replaced with strong, unique secrets.
- [COMMAND_EXECUTION]: Contains instructional shell commands for configuring MCP servers and generating secure cryptographic keys.
references/self-hosted-on-zeabur.mdprovides a bash script for rotating JWT secrets and signing keys usingopenssl.SKILL.mdandreferences/insforge.mdprovide commands to add MCP tools using theclaude mcp addsyntax.- [EXTERNAL_DOWNLOADS]: References official vendor packages and well-known open-source libraries.
- Uses
npx -y @insforge/mcp@latestto install the vendor-specific MCP server for InsForge. - Recommends established libraries like
github.com/golang-jwt/jwt/v5andgithub.com/MicahParks/keyfunc/v3for secure JWT handling in Go.
Audit Metadata