Audit Supabase RLS policies and database configurations for security vulnerabilities.
npx skills add https://github.com/NicholasSutin/parser --skill supabase-nicholassutin
Please help me install this Agent Skill. Skill: supabase Source: https://github.com/NicholasSutin/parser/tree/main/.claude/skills/supabase Command: npx skills add https://github.com/NicholasSutin/parser --skill supabase-nicholassutin
This skill provides a structured, security-conscious framework for developing with the Supabase ecosystem, preventing common pitfalls like insecure RLS policies, BOLA vulnerabilities, and configuration errors.
Use the supabase skill to audit the current RLS policies in the public schema for potential security vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To audit Supabase RLS policies, validate row-level security policies, view security, and storage access controls against known Supabase security traps like BOLA vulnerabilities. This structured security framework prevents insecure policy configurations and ensures correct row-level isolation for multi-tenant applications.
Manage Supabase database schema migrations by following structured guidance for schema changes, exposing database tables to the Data API, and configuring Postgres extensions like pg_vector. This framework ensures version-specific documentation adherence and established security best practices.
The best way to implement multi-tenant row-level isolation in Supabase is by designing RLS policies that correctly enforce row-level isolation and configuring database functions with the correct security invoker settings to prevent unauthorized data access across tenants.
Yes, this Supabase development guidance covers CLI operations and API integration, providing comprehensive instructions for managing Supabase projects using the supabase-js library while adhering to established Postgres security best practices and version-specific documentation.
Supabase database functions are vulnerable to BOLA attacks when they are not configured with the correct security invoker settings. This framework helps identify and resolve these configuration errors by validating function security against known Supabase security traps.
You need to use Postgres extensions like pg_vector with Supabase when your application requires vector similarity search capabilities. This framework guides the integration of pg_vector and other extensions while maintaining secure Data API exposure and schema migration management.
NagyViktManage Supabase CLI workflows for local environments, migrations, and TypeScript types.
canyouseeusGoverns Supabase deployments via managed migrations, policies, and secrets.
SleestkAutomate Supabase database, schema, RLS, and authentication setup in Next.js.
RitenoobImplement Supabase Row Level Security policies for role-based data access.
