Security audit
Supabase
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed Supabase integration that can read and change connected project data through Maton, with sensitive access matching its stated purpose.
Install only if you trust Maton with the connected Supabase project. Prefer a staging or least-privileged project for exploration, specify the intended connection when multiple projects exist, and carefully review any proposed POST, PUT, PATCH, or DELETE operation before approving it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.