The Agent Skills Directory

[Indirect Prompt Injection Surface]: The skill facilitates the ingestion of data from external sources, including database changes (onTableChanges) and broadcast messages (onBroadcast). As this content originates from outside the immediate agent context, it should be treated as untrusted. While this is inherent to the skill's purpose of providing realtime updates, developers should ensure that incoming data is validated or sanitized before being displayed or used in downstream logic to mitigate potential injection risks.

supabase-realtime