The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill defines patterns for real-time communication that incorporate dynamic user data into WebSocket channel names and event payloads (e.g., orders.{userId} in references/channels.md). While the skill correctly advocates for channel authorization, these dynamic segments represent an entry point for untrusted data into the agent's context during the generation of broadcasting logic.
Ingestion points: Channel definitions in routes/channels.php and client-side listeners in client.md accept variable input such as userId and roomId.
Boundary markers: The skill does not explicitly provide prompt delimiters for these dynamic values, relying instead on standard Laravel authorization logic.
Capability inventory: The skill enables network communication via WebSockets and requires environment configuration for app secrets.
Sanitization: The skill emphasizes the use of Broadcast::channel authorization closures and broadcastWith() to limit broadcast payloads to specific fields.
[EXTERNAL_DOWNLOADS]: The skill references standard, reputable packages and tools within the Laravel ecosystem.
Evidence: npm install laravel-echo pusher-js for client-side WebSocket support and php artisan install:broadcasting for server-side setup. These are official components of the Laravel framework.

laravel-reverb