supabase-ci-integration

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's stated purpose (configuring Supabase CI/CD with GitHub Actions) is generally coherent with its described prerequisites and outputs. The footprint is modest and typical for CI integration, involving test API keys and GitHub Actions workflows. The main security considerations relate to secret management (how the Supabase API key is stored and accessed) and ensuring that only official endpoints and registries are used. No unverifiable binaries or aggressive data exfiltration patterns are evident from the fragment. Overall, the risk is Benign with attention to proper secret handling and explicit data-flow safeguards.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 12:29 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fsupabase-ci-integration%2F@972a77ae6955b7d4dfce55779bf649c091860619