Supabase Security Audit

• Analyzed: May 16, 2026, 8:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: f9bba661a20853586f14c3ef1b78ca72b3a758b5957e75c4d4cd6e7691fa1a9f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle is a legitimate security auditing tool for Supabase and Vercel environments. The primary script, `scripts/audit.js`, performs read-only checks and simulated privilege escalation tests within PostgreSQL transactions that are explicitly rolled back to prevent permanent changes. The documentation in `SKILL.md` and `references/threat-patterns.md` is educational, focusing on identifying and fixing common RLS misconfigurations, and the provided SQL hotfix is a defensive measure to prevent unauthorized role mutations.