spectacles-cloud
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and implementation guide for cloud-based lens development, providing boilerplate code and architectural patterns.
- [EXTERNAL_DOWNLOADS]: The documentation includes an example of a serverless Edge Function that imports the
@supabase/supabase-jslibrary fromesm.sh, which is a well-known CDN for JavaScript and TypeScript modules. - [DATA_EXFILTRATION]: The code snippets utilize
fetch()andWebSocketto communicate with Supabase projects. These operations are essential to the skill's purpose of synchronizing persistent cloud data and are directed at user-defined infrastructure. - [CREDENTIALS_UNSAFE]: The skill uses placeholders for sensitive constants (e.g.,
your-anon-key). It proactively warns developers that the 'anon' key is publicly extractable and provides instructions on using Row-Level Security (RLS) and server-side Edge Functions to mitigate credential exposure.
Audit Metadata