What problem does it solve? Working with Supabase involves frequent API changes, subtle security traps like RLS misconfigurations and SECURITY DEFINER pitfalls, and hard-to-diagnose errors across Auth, Realtime, Storage, and Edge Functions. This Skill provides up-to-date operational guidance so AI agents implement Supabase features correctly and securely instead of relying on stale training data. ## Core Features & Use Cases - Security Checklist Enforcement: Covers Supabase-specific vulnerabilities including user_metadata JWT misuse, views bypassing RLS, BOLA/IDOR in policies, SECURITY DEFINER exposure, and Storage upsert permission requirements. - Schema Migration Workflows: Distinguishes declarative schema projects from imperative migrations, with correct CLI and MCP commands for iterating, running advisors, and committing migrations. - Debugging & Troubleshooting: Directs agents to fetch current monitoring and debugging documentation before diagnosing REST API errors, RLS blocks, Postgres errors, or service failures. - Use Case: When a user reports that a newly created table returns permission denied through the REST API, the Skill guides checking Data API exposure settings, granting roles access, and enabling RLS with proper ownership policies. ## Quick Start Ask the agent to help you set up a Supabase table with row level security policies and verify it works through the Data API.
