supabase-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash commands and dynamic context injection (!command syntax) in SKILL.md to retrieve system and runtime version information, such as
node --versionanduname -a. - [DATA_EXFILTRATION]: The skill reads sensitive file paths including
.envand npm log files to assist in debugging. It implements a redaction mechanism usingsedto mask values in the configuration file before adding it to the local diagnostic archive. - [COMMAND_EXECUTION]: Performs a network connectivity test using
curlagainst the official Supabase health endpoint (https://api.supabase.com/health) to verify API accessibility. - [SAFE]: The skill's operations are consistent with its stated purpose of creating a debug bundle, and it takes proactive steps to protect credentials via redaction and local-only storage of the collected data.
Audit Metadata