The Agent Skills Directory

COMMAND_EXECUTION (MEDIUM): Provides wrappers for running arbitrary SQL queries using bun run supabase:sql --query and a local ./supabase-cli. This creates a significant SQL injection surface if the agent interpolates untrusted user input into these queries without proper sanitization.\n- COMMAND_EXECUTION (MEDIUM): The skill explicitly instructs the agent to set verify_jwt = false in supabase/config.toml. This is a security-regressive configuration that disables the default authentication layer for Supabase Edge Functions, potentially exposing them to unauthorized access.\n- COMMAND_EXECUTION (LOW): Includes destructive filesystem operations such as rm -rf for deleting local edge function directories, which could be risky if the function name is manipulated.

supabase-workflow