Security audit
Supabase
Security checks for vulnerabilities and agentic risk
Overview
This is a small Supabase MCP connector that discloses its database, auth, and storage access and does not include hidden local code or bundled skills.
Install only if you intend to let your agent work with Supabase project data. Review the OAuth consent and available Supabase project permissions, especially for production databases, auth users, and storage buckets.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.