supabase-vercel-shop
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup process involves configuring a project-specific MCP server using the official @supabase/mcp-server-supabase package from a well-known provider.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs the agent and user to manage sensitive credentials (such as Supabase service role keys and Stripe secret keys) via environment variables and project-specific configuration files that are explicitly recommended to be excluded from version control via .gitignore.
- [COMMAND_EXECUTION]: Provides utility bash scripts intended for local execution to detect hardcoded strings and enforce branding consistency during the development process.
- [DATA_EXFILTRATION]: Database access is secured using Supabase Row Level Security (RLS), with provided SQL templates defining policies that restrict data access based on user identity and roles.
- [PROMPT_INJECTION]: Instructions use strong directive language to ensure architectural consistency (e.g., zero-hardcoding rules), which are standard development constraints and do not attempt to bypass safety guidelines.
Audit Metadata