supabase

Guides Supabase development, schema migrations, security audits, and debugging workflows.

Updated Feb 21, 2026
One-click install
npx skills add https://github.com/ESSSoWhat/live-translate-realtime-dubbing --skill supabase-esssowhat
Or copy as Structured Prompt for Agentโ–ผ
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/ESSSoWhat/live-translate-realtime-dubbing/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/ESSSoWhat/live-translate-realtime-dubbing --skill supabase-esssowhat

SYSTEM DOCUMENTATION & REQUIREMENTS

๐Ÿ’ก This Skill includes references (resource) and assets (resource) components.

What problem does it solve? Working with Supabase involves frequent API changes, subtle RLS security traps, and CLI version differences that cause silent failures and vulnerabilities. This Skill provides up-to-date guidance for building, securing, and debugging Supabase projects without relying on outdated training data. ## Core Features & Use Cases - Security Checklist: Covers Supabase-specific traps like user_metadata in JWTs, views bypassing RLS, SECURITY DEFINER functions, and BOLA/IDOR policy patterns. - Schema Management: Supports both declarative schemas and imperative migrations, with advisor checks and clean migration generation via the CLI or MCP server. - Debugging Workflows: Directs agents to fetch current monitoring and debugging docs before diagnosing REST API, Postgres, Auth, Realtime, Edge Function, or Storage errors. - Use Case: When a user reports that a newly created table is inaccessible via the REST API, the Skill guides checking Data API settings, granting role access, and enabling RLS correctly. ## Quick Start Ask the agent to help you create a Supabase table with secure RLS policies and generate a migration for it.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Supabase migration for schema changes?โ–ผ

Use execute_sql via MCP or supabase db query to iterate on changes, then run supabase db advisors and generate the migration with supabase db pull. For declarative schema projects, edit files in supabase/schemas/ and generate the migration from there.

How do I write secure RLS policies in Supabase?โ–ผ

Combine TO authenticated with an ownership predicate like auth.uid() = user_id in the USING clause, and add WITH CHECK for UPDATE policies. Avoid the deprecated auth.role() function and never use user_metadata claims for authorization decisions.

Why is my new Supabase table not accessible via the REST API?โ–ผ

Newly created tables may not be automatically exposed through the Data API depending on project settings. Check the Data API settings and explicitly grant access to the anon and authenticated roles, then enable RLS on the table.

Does the Supabase CLI support running SQL queries directly?โ–ผ

The supabase db query command requires CLI version 2.79.0 or later. For older versions, use the MCP execute_sql tool or psql as a fallback, and always discover available commands via --help since the CLI changes between versions.

Why do Supabase views bypass my RLS policies?โ–ผ

Views bypass RLS by default because they run with the view owner's permissions. In Postgres 15 and above, create views with security_invoker = true; otherwise revoke access from anon and authenticated roles or move views to an unexposed schema.