Skip to content
← Registry
Trust Report

supabase

Connect to Supabase for database operations, vector search, and storage. Use for storing data, running SQL queries, similarity search with pgvector, and managing tables. Triggers on requests involving databases, vector stores, embeddings, or Supabase specifically.

92
CONDITIONAL
Format: openclawScanner: v0.8.1Duration: 31msScanned: 4d ago · Jul 18, 12:01 PMSource →
Embed this badge
AgentVerus CONDITIONAL 92AgentVerus CONDITIONAL 92AgentVerus CONDITIONAL 92
[![AgentVerus](https://agentverus.ai/api/v1/skill/5d7e26b7-7197-4b4a-bc26-6946e999dc73/badge)](https://agentverus.ai/skill/5d7e26b7-7197-4b4a-bc26-6946e999dc73)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/5d7e26b7-7197-4b4a-bc26-6946e999dc73/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"5d7e26b7-7197-4b4a-bc26-6946e999dc73","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/5d7e26b7-7197-4b4a-bc26-6946e999dc73/trust

Category Scores

94
Permissions
100
Injection
100
Dependencies
75
Behavioral
65
Content
100
Code Safety

Findings (4)

highUnrestricted scope detected-20

Found unrestricted scope pattern: "full access"

| SUPABASE_SERVICE_KEY | Yes | Service role key (full access) |

Define clear boundaries for what the skill can and cannot do. Unrestricted scope is a security risk.

behavioralASST-09
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://yourproject.supabase.co

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumHigh-risk workflow lacks explicit safety boundaries-15

The skill performs or enables higher-risk operations but does not define explicit safety boundaries describing what it must not do.

No safety boundary patterns found alongside high-risk capability language

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
mediumSkill path discovery detected (inside code block)-5

Found skill path discovery pattern: "{baseDir}"

{baseDir}/scripts/supabase.sh query "SELECT * FROM users LIMIT 5"

Treat dynamic skill path resolution and installation-path discovery as local filesystem reconnaissance. Scope which paths may be read or executed from, and avoid broad path probing unless the user explicitly requested it.

behavioralASST-03