supabase-functions

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [Indirect Prompt Injection] (LOW): The skill defines templates for functions that process untrusted data from HTTP requests and external webhooks (e.g., Stripe).
  • Ingestion points: req.json() and req.text() in supabase/functions/*/index.ts templates.
  • Boundary markers: Absent in instructional code snippets.
  • Capability inventory: Functions can perform database operations, access environment variables, and invoke external APIs via Deno.env and supabaseClient.
  • Sanitization: Code examples demonstrate basic request handling (e.g., Hello ${name}) without explicit input validation or escaping.
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references libraries from trusted sources using Deno's standard import syntax.
  • Trusted Sources: Uses jsr:@supabase/ and npm:stripe, which are associated with recognized organizations or standard registries.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:26 PM