astro-supabase-netlify
Warn
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- EXTERNAL_DOWNLOADS (MEDIUM): The skill clones a remote repository from a non-whitelisted source.
- Evidence:
git clone --depth 1 https://github.com/netlify-templates/astro-supabase-starter.git .in SKILL.md. - COMMAND_EXECUTION (MEDIUM): The skill performs automated command execution on externally sourced files, including dependency installation and build scripts.
- Evidence:
npm install,npm run build, andnpm run devare executed after cloning the external repository. - CREDENTIALS_UNSAFE (SAFE): While the skill mentions configuring a
.envfile for Supabase credentials, it does not include hardcoded secrets or instructions to exfiltrate them.
Audit Metadata