Supabase
v1.0.0Supabase integration. Manage data, records, and automate workflows. Use when the user wants to interact with Supabase data.
⭐ 0· 26·0 current·0 all-time
byVlad Ursul@gora050
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares it integrates Supabase and all runtime instructions use the Membrane CLI to manage connections and proxy requests. Requiring the Membrane CLI and a Membrane account is consistent with the stated purpose; there are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md only instructs the agent to install and run the Membrane CLI, log in, create/list connections, discover and run actions, and proxy requests to Supabase. It does not instruct reading unrelated files, harvesting system environment variables, or sending data to unexpected endpoints.
Install Mechanism
Installation is a single public npm step (npm install -g @membranehq/cli) and occasional npx usage. This is appropriate for a CLI-based integration but installing a global npm package requires elevated permissions and trust in the package/publisher—verify the package and repository before installing.
Credentials
The skill declares no required environment variables or primary credentials and explicitly instructs not to ask users for API keys, relying on Membrane to handle auth. That is proportionate to its role as a Membrane-mediated Supabase integration.
Persistence & Privilege
The skill is instruction-only, has no 'always:true' flag, and does not request persistent or system-wide privileges beyond installing a CLI tool. It does not attempt to modify other skills or system settings.
Assessment
This skill appears coherent: it uses Membrane to talk to Supabase and asks you to install the Membrane CLI and log in via your browser. Before installing, verify the @membranehq/cli npm package and its repository (check publisher, code, and npm download stats), confirm you trust getmembrane.com/Membrane as the auth broker, and be aware that installing a global npm package requires system-level permission. If you prefer not to grant a third-party service access to your Supabase data, don't create a Membrane connection.Like a lobster shell, security has layers — review code before you run it.
latestvk979hajqewzf30dk7yqfrnmf2x849n4j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.