supabase-audit-realtime

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill is internally consistent as a Supabase Realtime pentest workflow and uses official Supabase endpoints with proportionate credentials, but it gives an AI agent offensive security-testing capability and may collect live sensitive data during unauthorized subscription checks. No third-party credential routing, installer abuse, or exfiltration behavior is evident.