supabase
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation and changelogs from official Supabase domains (supabase.com) and the Supabase CLI GitHub repository. These are trusted sources for configuration and reference materials.
- [COMMAND_EXECUTION]: Uses standard Supabase CLI commands (e.g.,
supabase db query,supabase migration new) for project management. These operations are restricted to the intended purpose of the skill and follow local development workflows. - [PROMPT_INJECTION]: The skill instructions include safety-oriented overrides (e.g., 'Never use user_metadata claims in JWT-based authorization') designed to protect the user from common security pitfalls, rather than bypassing agent safety protocols.
- [DATA_EXFILTRATION]: Performs status checks on official Supabase MCP endpoints (
mcp.supabase.com). No sensitive data is transmitted to third-party or unknown domains.
Audit Metadata