add-supabase-auth

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime path reads/acts on outsider-controlled free text via the app’s deep-link URL event handler (Linking.addEventListener('url') checks for 'auth/callback' and then calls supabase.auth.getSession(), which will parse the session token contained in that URL).