supabase-cli

Fail

Audited by Snyk on Feb 16, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The prompt contains examples that embed secret values directly in CLI commands and headers (e.g., supabase secrets set API_KEY=abc123, curl Authorization header, and DB connection strings with passwords), which would require the LLM to output secrets verbatim if real values are substituted.
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 16, 2026, 12:22 AM