supabase-validation
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The playground automation scripts use the
execSyncfunction to interact with the local operating system, performing tasks such as file restoration viagit checkout, database queries throughdocker exec, and project management via thesupabaseCLI. - [EXTERNAL_DOWNLOADS]: Connectivity to the official Supabase Management API (
api.supabase.com) is implemented in the environment setup and pre-flight scripts to retrieve necessary project configuration and API keys for production-level verification tasks. - [SAFE]: The skill includes robust internal security guidelines, such as a 'Global Clause' that explicitly prohibits the agent from disclosing secrets like service role keys or JWTs, and an 'Environment Classification Gate' to prevent accidental destructive operations on production systems.
Audit Metadata