opencode-supabase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 步驟七（進階選用）把 Supabase 官方託管的遠端 MCP server 連到 OpenCode（url 含 read_only=true），而學生/外部提交的自由文字會被寫入 Supabase 表（如 wordcloud.word），MCP 讀取這些資料時可能讓 agent 看到其中的注入性指令。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's front-end imports and executes remote JavaScript at runtime from the CDN URL https://esm.sh/@supabase/supabase-js@2, which is a required runtime dependency that fetches and runs external code in clients.