supabase-database-functions

What problem does it solve?

Supabase users often struggle to implement secure, maintainable PostgreSQL functions that respect RLS, enforce proper permissions, and securely handle secrets. This Skill provides a structured approach to creating and managing database functions with explicit search_path, SECURITY INVOKER/DEFINER modes, Vault-based secret management, triggers, and RLS-aware patterns.

Core Features & Use Cases

• Security modes: Choose between SECURITY INVOKER (default) and SECURITY DEFINER with explicit permission checks and safe fallback.
• Vault-based secrets: Store and retrieve API keys or credentials without hardcoding them in functions.
• Search_path discipline: Always set search_path = '' and reference objects with fully qualified names.
• Triggers and RLS integration: Implement BEFORE/AFTER triggers and pattern-based RLS workflows for secure data access.

Quick Start

Create a sample SECURITY INVOKER function with search_path set to '' and retrieve a secret from Vault inside the function.