supabase-functions
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Indirect Prompt Injection] (LOW): The skill defines templates for functions that process untrusted data from HTTP requests and external webhooks (e.g., Stripe).
- Ingestion points:
req.json()andreq.text()insupabase/functions/*/index.tstemplates. - Boundary markers: Absent in instructional code snippets.
- Capability inventory: Functions can perform database operations, access environment variables, and invoke external APIs via
Deno.envandsupabaseClient. - Sanitization: Code examples demonstrate basic request handling (e.g.,
Hello ${name}) without explicit input validation or escaping. - [EXTERNAL_DOWNLOADS] (SAFE): The skill references libraries from trusted sources using Deno's standard import syntax.
- Trusted Sources: Uses
jsr:@supabase/andnpm:stripe, which are associated with recognized organizations or standard registries.
Audit Metadata