astro-supabase-netlify
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill clones a template repository from
https://github.com/netlify-templates/astro-supabase-starter.git. Because the 'netlify-templates' organization is not explicitly listed as a trusted source, the repository contents and its dependency tree must be manually audited to ensure they do not contain malicious code. - COMMAND_EXECUTION (LOW): Following the clone, the skill executes
npm install,npm run build, andnpm run dev. These commands trigger lifecycle scripts and build processes defined in the downloadedpackage.json, which could result in arbitrary code execution if the external repository is compromised.
Audit Metadata