supabase
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill code is transparent and follows its stated purpose of providing an interface to Supabase projects via the official management API.\n- [SAFE]: The skill follows security best practices for secret management by instructing users to use local environment variables for sensitive access tokens instead of hardcoding them.\n- [COMMAND_EXECUTION]: The script uses local shell utilities (curl, jq, cat) as the mechanism for API interaction, which is appropriate and securely implemented.\n- [EXTERNAL_DOWNLOADS]: Communicates exclusively with official Supabase endpoints (api.supabase.com and *.supabase.co), which are well-known and trusted technology services.
Audit Metadata