supabase-cli
Provides comprehensive CLI commands for managing Supabase projects, including local development, migrations, and deployment.
Install this skill
or
91/100
Security score
The supabase-cli skill was audited on Feb 12, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
low line 234
Webhook reference - potential data exfiltration
SourceSKILL.md
| 234 | # Deploy without JWT verification (for webhooks) |
low line 235
Webhook reference - potential data exfiltration
SourceSKILL.md
| 235 | supabase functions deploy webhook-handler --no-verify-jwt |
low line 222
Access to .env file
SourceSKILL.md
| 222 | supabase functions serve --env-file .env --no-verify-jwt |
low line 257
Access to .env file
SourceSKILL.md
| 257 | # Set from .env file |
low line 258
Access to .env file
SourceSKILL.md
| 258 | supabase secrets set --env-file .env |
low line 84
External URL reference
SourceSKILL.md
| 84 | API URL: http://localhost:54321 |
low line 86
External URL reference
SourceSKILL.md
| 86 | Studio URL: http://localhost:54323 |
low line 87
External URL reference
SourceSKILL.md
| 87 | Inbucket URL: http://localhost:54324 |
low line 242
External URL reference
SourceSKILL.md
| 242 | 'http://localhost:54321/functions/v1/hello-world' \ |
Scanned on Feb 12, 2026
View Security Dashboard