Skip to main content

supabase

Facilitates local development and management of Supabase projects, including migrations and serverless functions.

Install this skill

or
70/100

Security score

The supabase skill was audited on Feb 12, 2026 and we found 18 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 262

Template literal with variable interpolation in command context

SourceSKILL.md
262JSON.stringify({ message: `Hello ${name}!` }),
medium line 367

Template literal with variable interpolation in command context

SourceSKILL.md
367```yaml
low line 223

Access to .env file

SourceSKILL.md
223# .env.local (local development)
low line 228

Access to .env file

SourceSKILL.md
228# .env.production (remote)
low line 275

Access to .env file

SourceSKILL.md
275Deno.env.get('SUPABASE_URL') ?? '',
low line 276

Access to .env file

SourceSKILL.md
276Deno.env.get('SUPABASE_ANON_KEY') ?? '',
medium line 423

Access to .env file

SourceSKILL.md
423- **Committing .env** - Add to .gitignore
low line 12

External URL reference

SourceSKILL.md
12**Sources:** [Supabase Docs](https://supabase.com/docs) | [Supabase CLI](https://supabase.com/docs/guides/local-development/cli/getting-started)
low line 65

External URL reference

SourceSKILL.md
65# Get project ref from dashboard URL: https://supabase.com/dashboard/project/<ref>
low line 77

External URL reference

SourceSKILL.md
77# API URL: http://localhost:54321
low line 78

External URL reference

SourceSKILL.md
78# GraphQL URL: http://localhost:54321/graphql/v1
low line 80

External URL reference

SourceSKILL.md
80# Studio URL: http://localhost:54323
low line 213

External URL reference

SourceSKILL.md
213SUPABASE_URL=https://xxxxx.supabase.co
low line 224

External URL reference

SourceSKILL.md
224SUPABASE_URL=http://localhost:54321
low line 229

External URL reference

SourceSKILL.md
229SUPABASE_URL=https://xxxxx.supabase.co
low line 256

External URL reference

SourceSKILL.md
256import { serve } from 'https://deno.land/[email protected]/http/server.ts';
low line 270

External URL reference

SourceSKILL.md
270import { serve } from 'https://deno.land/[email protected]/http/server.ts';
low line 271

External URL reference

SourceSKILL.md
271import { createClient } from 'https://esm.sh/@supabase/supabase-js@2';
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →