supabase
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard instructions for Supabase integration, including schema design, RLS policy creation, and TypeScript type generation. These are typical development tasks and do not introduce security risks.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill references sensitive environment variable names such as
SUPABASE_SERVICE_ROLE_KEYand.envfiles. However, it explicitly warns the developer: 'server-side only, never expose' and 'Never use the service role key in client-side code.' These are security best practices for credential management, not exfiltration attempts. - [COMMAND_EXECUTION]: The skill uses
ls,cat, and thesupabaseCLI for local development tasks like checking configurations and generating migrations. These commands are scoped to the project environment and are standard for Supabase workflows.
Audit Metadata