supabase-node
Integrates Supabase with Node.js using Drizzle ORM for type-safe database access and authentication in Express applications.
Install this skill
or
85/100
Security score
The supabase-node skill was audited on Feb 12, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 615
Template literal with variable interpolation in command context
SourceSKILL.md
| 615 | console.log(`Server running on port ${config.PORT}`); |
medium line 698
Template literal with variable interpolation in command context
SourceSKILL.md
| 698 | const filePath = `${req.user!.id}/avatar.${fileExt}`; |
low line 54
Access to .env file
SourceSKILL.md
| 54 | └── .env |
low line 83
Access to .env file
SourceSKILL.md
| 83 | # .env |
low line 116
Access to .env file
SourceSKILL.md
| 116 | export const config = envSchema.parse(process.env); |
low line 12
External URL reference
SourceSKILL.md
| 12 | **Sources:** [Supabase JS Client](https://supabase.com/docs/reference/javascript/introduction) | [Drizzle ORM](https://orm.drizzle.team/) |
low line 88
External URL reference
SourceSKILL.md
| 88 | SUPABASE_URL=http://localhost:54321 |
Scanned on Feb 12, 2026
View Security DashboardGitHub Stars 55
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
openclawbackenddatabasebackend-developerdata-engineerproduct-managersupabasepostgresqldevelopmentproduct
NeverSight/skills_feed