The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill describes a framework for processing external data via 'reducers'. While this creates a potential attack surface if untrusted data is processed without sanitization, the SpacetimeDB architecture restricts reducers to a deterministic WASM sandbox without network or filesystem access, significantly mitigating risk.
Ingestion points: Reducer function parameters (e.g., create_player(ctx, name) in SKILL.md).
Boundary markers: The framework uses typed parameters, but developers must implement their own logic-level validation as shown in the examples.
Capability inventory: Reducers are restricted to database table operations; network and filesystem access are explicitly forbidden in the runtime.
Sanitization: Code examples demonstrate basic validation patterns, such as checking for empty strings before processing.
[SAFE]: The skill uses standard Rust dependencies (spacetimedb, log) and CLI tools associated with the official SpacetimeDB platform. All referenced resources are consistent with the vendor's own tooling.
[SAFE]: No obfuscation, hardcoded credentials, or persistence mechanisms were found. The documentation focuses exclusively on legitimate software development practices and API usage guidelines.

spacetimedb-rust