supabase-pentest
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS/HIGH-RISK but not malware. The skill is internally consistent with a Supabase pentest orchestrator and uses local evidence storage plus explicit authorization language, but it equips an AI agent with offensive security capabilities and some state-changing actions against external targets. No malicious exfiltration or suspicious installer path is present in the provided text; the main risk is the pentesting capability itself and reliance on unreviewed companion sub-skills.
Confidence: 90%Severity: 82%
Audit Metadata