supabase-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a shell script for generating a diagnostic bundle, which executes various system utilities.
- Evidence: The Bash script in
references/implementation.mdusesnode,npm,grep,sed,curl, andtarto collect and package system data. - [DATA_EXFILTRATION]: The skill accesses local files that may contain sensitive information, although it attempts to redact secrets.
- Evidence: In
references/implementation.md, the script reads~/.npm/_logs/*.logand.envfiles. - Sanitization: It uses
sed 's/=.*/=***REDACTED***/'to mask values in the.envfile before saving them to the diagnostic report. - [EXTERNAL_DOWNLOADS]: The skill performs a network connectivity test to a well-known service endpoint.
- Evidence: It uses
curl -s -o /dev/null -w "%{http_code}" https://api.supabase.com/healthto verify communication with the official Supabase API.
Audit Metadata