backupdrill/supabase-backup
Back up a Supabase project to your own S3, R2 or B2 bucket with the open-source backupdrill CLI, run a restore drill to prove the snapshot restores, and restore into a new project. Includes plain pg_dump and pg_restore notes for Supabase and what the Free plan does and doesn't back up.
92%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill instructs the execution of `npx -y backupdrill@2.10.0`, which fetches and runs external code from the npm registry without a first-party publisher provenance, making it a weak/unknown operational dependency.
Where we found it
backupdrill@2.10.0
dependency · 5 sites
The skill instructs execution of `npx -y backupdrill@2.10.0` at five distinct command sites, fetching and running the backupdrill package from npm without first-party publisher provenance.
SKILL.md
10
Always run it as `npx -y backupdrill@2.10.0 <command>`, so every run uses the same version. Every command and option is documented at [backupdrill.com/docs/cli]
SKILL.md
74
npx -y backupdrill@2.10.0 estimate --plan pro )
SKILL.md
85
npx -y backupdrill@2.10.0 backup ) > "$report"
SKILL.md
98
npx -y backupdrill@2.10.0 drill )
SKILL.md
117
npx -y backupdrill@2.10.0 restore --database --target-supabase-url https://<target-ref>.supabase.co --dry-run )
- Audited
- Security analysis