backend-dev

Implement secure Supabase backend changes for Atomic CRM.

Updated Jun 26, 2026
One-click install
npx skills add https://github.com/marmelab/atomic-crm-demo-art-teaching --skill backend-dev-marmelab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: backend-dev
Source: https://github.com/marmelab/atomic-crm-demo-art-teaching/tree/main/.claude/skills/backend-dev
Command: npx skills add https://github.com/marmelab/atomic-crm-demo-art-teaching --skill backend-dev-marmelab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Atomic CRM relies entirely on Supabase for server-side logic, so developers need clear, consistent guidelines to implement backend changes safely and avoid common security vulnerabilities like privilege escalation, quota bypass, and data leaks from misconfigured RLS policies or edge functions.

Core Features & Use Cases

  • Backend Logic Decision Framework: Guides developers on when to implement backend changes versus using frontend-only custom dataProvider methods for Atomic CRM features.
  • Supabase Implementation Standards: Defines conventions for database migrations, RLS policies, edge functions, and maintenance of summary views like contacts_summary and companies_summary.
  • Critical Security Guardrails: Highlights high-risk pitfalls (e.g., insecure RLS policies, misconfigured edge function middleware) and provides a verification checklist to avoid vulnerabilities. Use Case: When adding a new customer subscription tracking feature to Atomic CRM, this skill ensures you implement secure quota-enforcing triggers, proper RLS policies, and correctly ordered edge function middleware to prevent billing bypasses and unauthorized data access.

Quick Start

Use the backend-dev skill to implement a secure RLS policy for the new customer subscriptions table that restricts row access to the owning sales user and prevents unauthorized modification of sensitive columns like subscription status and billing amounts.

Frequently Asked Questions about backend-dev

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create secure RLS policies for a Supabase database migration?

To create secure RLS policies for a Supabase database migration, you must restrict row access to owning users and prevent unauthorized modification of sensitive columns. This prevents privilege escalation and data leaks from misconfigured policies.

What is the correct middleware ordering for Supabase edge functions?

Correct Supabase edge function middleware ordering requires applying specific verification checklists to prevent security vulnerabilities like billing bypasses. Properly ordered middleware ensures correct execution flow and enforces access quotas securely.

When should I use Supabase edge functions versus frontend custom dataProvider methods?

Use Supabase edge functions for server-side logic requiring strict security compliance, and use frontend custom dataProvider methods for non-sensitive operations. A backend logic decision framework helps determine the correct implementation path for Atomic CRM features.

How do I synchronize summary views like contacts_summary in Supabase?

To synchronize summary views like contacts_summary in Supabase, you must follow specific database migration standards that maintain data consistency across related tables. This ensures summary views reflect accurate aggregated data after backend modifications.

What are common security pitfalls when building Supabase backend features?

Common Supabase backend security pitfalls include insecure RLS policies, misconfigured edge function middleware, and quota bypasses. Applying critical security guardrails and a verification checklist helps eliminate these inconsistent and insecure implementation risks.