Supabase Dashboard Builder

• Analyzed: May 14, 2026, 4:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: f12b8ce04da4e7f088cdfdf4c9d1b6e2e0e82ca50f4740b088e7a697564eebfb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a template for building a Supabase dashboard using a FastAPI proxy in SKILL.md. It contains architectural vulnerabilities, specifically the use of the high-privilege SUPABASE_SERVICE_KEY in a proxy that lacks its own authentication mechanism, and a recommendation for an overly permissive CORS policy (allow_origins=['*']). These flaws could lead to unauthorized access to the whitelisted database tables if the application is deployed as described. No evidence of intentional malice or data exfiltration was found.