supabase-audit-auth-users

SUSPICIOUS: the skill is internally consistent and uses official Supabase endpoints directly, with no installer or third-party credential forwarding. However, it grants an AI agent autonomous offensive security testing capability against authentication flows, which is high risk by policy even without clear malicious intent.