supabase

Manage Supabase database operations, authentication workflows, and security configurations.

5|Updated Jan 20, 2026
One-click install
npx skills add https://github.com/mohamedgshoaib/reway --skill supabase-mohamedgshoaib
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/mohamedgshoaib/reway/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/mohamedgshoaib/reway --skill supabase-mohamedgshoaib

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This skill provides expert guidance for Supabase development, ensuring that database schemas, authentication flows, and API integrations are built securely and according to current best practices.

Core Features & Use Cases

  • Security Auditing: Validates RLS policies, JWT claims, and storage access to prevent common vulnerabilities.
  • Schema Management: Orchestrates migrations, database queries, and Postgres extensions like pg_vector.
  • Use Case: When setting up a new multi-tenant application, use this skill to verify that your RLS policies correctly isolate user data and that your database functions are safely defined.

Quick Start

Use the supabase skill to audit the current RLS policies for the public schema and suggest improvements based on the security checklist.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design Supabase RLS policies for a multi-tenant application?

To design Supabase RLS policies for multi-tenant applications, validate JWT claims and storage access to ensure user data isolation. This process applies security best practices to Postgres schemas, preventing common vulnerabilities while safely defining database functions.

What is the best way to manage Postgres migrations and pg_vector extensions in Supabase?

Managing Postgres migrations and pg_vector extensions in Supabase requires orchestrating database queries and schema changes. Following version-specific documentation ensures your backend API integration remains stable and aligned with current Supabase client libraries.

How does Supabase authentication workflow integration work with backend APIs?

Supabase authentication workflow integration works by managing security configurations and validating JWT claims against your Postgres database. This ensures full-stack development tasks adhere to version-specific documentation and security best practices for client libraries.

Can I audit existing RLS policies and storage access rules in my Supabase database?

Yes, you can audit existing RLS policies and storage access rules in your Supabase database. Security auditing validates your current public schema configurations against a security checklist, suggesting improvements to prevent common vulnerabilities.

Why do I need to follow version-specific documentation for Supabase client libraries?

You need to follow version-specific documentation for Supabase client libraries because Postgres and API integrations require strict adherence to security best practices. This ensures database functions and authentication workflows operate without vulnerabilities.