supabase-email-templates — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited supabase-email-templates (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Customize Supabase Auth email templates for local development and production.
Use exact names: recovery, confirmation, invite, magic_link, email_change
1. Create template at supabase/templates/emails/recovery.html:
<body style="margin: 0; padding: 0;">
<table style="max-width: 600px; margin: 0 auto;">
<tr><td style="padding: 40px; text-align: center;">
<h1>Your App</h1>
<a href="{{ .ConfirmationURL }}"
style="display: inline-block; padding: 12px 32px;
background: #2563eb; color: #fff; border-radius: 6px;">
Reset Password
</a>
</td></tr>
</table>
</body>2. Configure in supabase/config.toml (path relative to project root):
[auth.email.template.recovery]
subject = "Reset your password"
content_path = "./supabase/templates/emails/recovery.html"3. Restart auth container:
docker restart supabase_auth_<project-name>Test with Inbucket at http://localhost:54324:
# Send test email
curl -X POST 'http://localhost:54321/auth/v1/recover' \
-H "apikey: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0" \
-H "Content-Type: application/json" \
-d '{"email": "[email protected]"}'
# View at http://localhost:54324Available: {{ .ConfirmationURL }}, {{ .Email }}, {{ .SiteURL }}, {{ .Token }}
Default template still showing?
supabase start, always restart auth: docker restart supabase_auth_<project>Template not found (404)?
supabase stop && supabase startTemplate parse errors?
rgba() in CSS valuesTemplates deploy via GitHub Actions using deploy-templates.js:
- name: Deploy Email Templates
run: node ./supabase/templates/deploy-templates.js
env:
SUPABASE_PROJECT_REF: ${{ secrets.SUPABASE_PROJECT_ID }}
SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}Use inline CSS only, max 600px width, table layouts, test in Inbucket first
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.