supabase-incident-runbook

Warn

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill includes instructions in references/immediate-actions-by-error-type.md to retrieve and decode sensitive API keys stored in Kubernetes secrets using the command kubectl get secret supabase-secrets -o jsonpath='{.data.api-key}' | base64 -d.
  • [COMMAND_EXECUTION]: The skill uses kubectl via Bash to perform administrative infrastructure changes, including modifying environment variables (kubectl set env), creating or updating secrets (kubectl create secret), and restarting services (kubectl rollout restart). These operations require high privileges and can significantly impact the production environment's configuration and availability.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 12, 2026, 12:40 AM