browser-api-relay
Use when a service's Management API returns 403/Cloudflare WAF from Python/CLI but works in the browser, or when you need to create tables/execute DDL on Supabase without a service_role key, or when any API requires browser-level TLS trust that CLI cannot provide.
Install this skill
or
95/100
Security score
The browser-api-relay skill was audited on Jul 29, 2026 and we found 1 security issue across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 80
Fetch to external URL
SourceSKILL.md
| 78 | (async () => {{ |
| 79 | const token = JSON.parse(localStorage.getItem('supabase.dashboard.auth.token')).access_token; |
| 80 | const resp = await fetch('https://api.supabase.com/v1/projects/XXX/database/query', {{ |
| 81 | method: 'POST', |
| 82 | headers: {{'Authorization': 'Bearer ' + token, 'Content-Type': 'application/json'}}, |
Scanned on Jul 29, 2026
View Security Dashboard