supabase-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses placeholders such as
${SUPABASE_API_KEY}in configuration templates instead of hardcoding actual credentials, following standard security best practices. - [SAFE]: The instructions explicitly recommend using robust secret management solutions (Vault, AWS Secrets Manager) for storing production API keys, which aligns with industry security standards for multi-environment deployments.
- [SAFE]: The
allowed-toolsconfiguration uses scoped bash tags (e.g.,aws:*,gcloud:*,vault:*), which is a security-conscious design that restricts the agent's command execution to specific, necessary cloud and security toolsets. - [SAFE]: External references target well-known and trusted technology documentation (Supabase official docs and 12-Factor App guidelines).
Audit Metadata