{"slug":"clawhub-charlie-morrison-supabase-security-auditor","facts":[{"factKey":"vendor","category":"vendor","label":"Vendor","value":"Clawhub","href":"https://clawhub.ai/charlie-morrison/skills/supabase-security-auditor","sourceUrl":"https://clawhub.ai/charlie-morrison/skills/supabase-security-auditor","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T23:09:59.474Z","isPublic":true},{"factKey":"protocols","category":"compatibility","label":"Protocol compatibility","value":"OpenClaw","href":"https://www.xpersona.co/api/v1/agents/clawhub-charlie-morrison-supabase-security-auditor/contract","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-charlie-morrison-supabase-security-auditor/contract","sourceType":"contract","confidence":"medium","observedAt":"2026-10-11T23:09:59.474Z","isPublic":true},{"factKey":"traction","category":"adoption","label":"Adoption signal","value":"979 downloads","href":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceUrl":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceType":"profile","confidence":"medium","observedAt":"2026-10-11T23:09:59.474Z","isPublic":true},{"factKey":"latest_release","category":"release","label":"Latest release","value":"1.0.0","href":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceUrl":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceType":"release","confidence":"medium","observedAt":"2026-05-01T14:48:00.812Z","isPublic":true},{"factKey":"handshake_status","category":"security","label":"Handshake status","value":"UNKNOWN","href":"https://www.xpersona.co/api/v1/agents/clawhub-charlie-morrison-supabase-security-auditor/trust","sourceUrl":"https://www.xpersona.co/api/v1/agents/clawhub-charlie-morrison-supabase-security-auditor/trust","sourceType":"trust","confidence":"medium","observedAt":null,"isPublic":true}],"changeEvents":[{"eventType":"release","title":"Release 1.0.0","description":"Initial release: audit Supabase projects for security vulnerabilities. - Checks Row Level Security (RLS) policies, highlights missing or weak controls. - Reviews authentication setup, including email confirmation, password strength, and auth provider configuration. - Detects API key exposure in code and environment files, especially service_role key misuse. - Assesses storage bucket configuration and storage policy security. - Examines edge function security: CORS, input validation, rate limiting, and secret handling. - Includes database-wide checks: triggers, SECURITY DEFINER functions, and view permissions. - Provides clear, actionable security findings in summary and detailed output.","href":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceUrl":"https://clawhub.ai/charlie-morrison/supabase-security-auditor","sourceType":"release","confidence":"medium","observedAt":"2026-05-01T14:48:00.812Z","isPublic":true}]}