supabase-db-rpc-auditor

Audit Supabase schema, RPCs, views, and RLS policies against SQL migrations and application code.

Updated Aug 16, 2025
One-click install
npx skills add https://github.com/Tomy74-vsc/cliprace --skill supabase-db-rpc-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase-db-rpc-auditor
Source: https://github.com/Tomy74-vsc/cliprace/tree/main/.cursor/skills/supabase-db-rpc-auditor
Command: npx skills add https://github.com/Tomy74-vsc/cliprace --skill supabase-db-rpc-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures your Supabase database schema, Remote Procedure Calls (RPCs), views, and Row Level Security (RLS) policies are consistent, secure, and performant, aligning perfectly with your application code.

Core Features & Use Cases

  • Schema Validation: Detects mismatches between your application's database interactions and the actual Supabase schema.
  • RPC & View Auditing: Verifies RPC signatures, parameter handling, and return shapes, and ensures views are correctly defined.
  • RLS Policy Review: Assesses RLS policies for correctness, security gaps, and adherence to your application's access control logic.
  • Performance Analysis: Identifies potential performance bottlenecks like missing indexes or inefficient query patterns.
  • Use Case: When you deploy new SQL migrations or update your application's Supabase interaction code, use this Skill to automatically audit for any inconsistencies, security vulnerabilities, or performance regressions before they impact production.

Quick Start

Use the supabase-db-rpc-auditor skill to review the provided SQL migration file and the attached TypeScript code for any Supabase schema or RPC correctness issues.

Frequently Asked Questions about supabase-db-rpc-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Supabase RLS policies for security vulnerabilities?

To audit Supabase RLS policies, you review them against your application code to identify security gaps and adherence issues. This process assesses policy correctness and ensures your database access controls align perfectly with your application logic.

What is the best way to validate Supabase RPC signatures against application code?

Validating Supabase RPC signatures involves verifying parameter handling and return shapes against your application code. This ensures type compatibility and confirms that your Remote Procedure Calls are correctly defined for your application interactions.

How do I check Supabase database schema consistency before deploying migrations?

Checking Supabase database schema consistency detects mismatches between application interactions and the actual schema. By validating table and column existence against SQL migrations, you prevent inconsistencies before impacting production.

Can I detect missing indexes and performance issues in a Supabase database audit?

Yes, you can detect missing indexes and performance issues during a Supabase database audit. Performance analysis identifies potential bottlenecks like inefficient query patterns, ensuring your schema and RPCs remain performant.

Does the Supabase auditor work with TypeScript code and SQL migration files?

Yes, the Supabase auditor works with TypeScript code and SQL migration files. It reviews provided SQL migrations and attached application code to automatically find schema, RPC, and RLS correctness issues.