supabase-postgres-best-practices
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The metadata in
SKILL.mdidentifies the author and organization as "Supabase" and states the guide is "maintained by Supabase." According to provided context, the skill is authored by "Sarthib7." This misrepresentation of identity is deceptive metadata poisoning that could lead users or agents to trust the content based on a false authority claim. - [PROMPT_INJECTION]: The skill provides structured instructions and SQL patterns intended to guide automated query optimization and code generation by an agent, creating a surface for indirect prompt injection. 1. Ingestion points: Reference markdown files in the
references/directory. 2. Boundary markers: Absent. 3. Capability inventory: Writing, reviewing, and optimizing Postgres queries as defined inSKILL.md. 4. Sanitization: Absent.
Audit Metadata