supabase-audit-authenticated

SUSPICIOUS. The skill is internally coherent for a Supabase authenticated audit and uses official Supabase endpoints with no third-party proxy or supply-chain lure. However, it gives an AI agent offensive security instructions against a live service, creates accounts, may use an admin credential for cleanup, and stores sensitive audit artifacts locally; this makes it high-risk as a capability even without signs of credential theft or malware.