supabase

Guide Supabase projects with security checks across databases, auth, and edge services.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/NihaalManaf/LDR-Island --skill supabase-nihaalmanaf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/NihaalManaf/LDR-Island/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/NihaalManaf/LDR-Island --skill supabase-nihaalmanaf

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

Supabase projects often require consistent best practices and guardrails across databases, auth, and edge services. This skill provides structured guidance, checks, and validated workflows to reduce misconfigurations and security risks.

Core Features & Use Cases

  • Comprehensive guidance across Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues) and client libraries (supabase-js, @supabase/ssr) across popular frameworks (Next.js, React, SvelteKit, Astro, Remix).
  • Emphasizes security best practices (RLS by default, safe handling of JWT claims, correct app_metadata usage, and secret management) and MCP tooling guidance for verification against current docs.
  • Use cases include implementing robust authentication flows, role-based access control, migrations, performance tuning, and troubleshooting common issues.

Quick Start

Configure a new Supabase project by following this guide to securely set up authentication, database schemas, and storage with recommended access controls.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up Row Level Security policies in Supabase?

Configure RLS defaults and role-based access control rules within your database schemas to enforce secure data access. This approach validates permissions directly at the database level, preventing unauthorized data exposure.

Does Supabase authentication work with Next.js and SvelteKit frameworks?

Supabase authentication works with Next.js, SvelteKit, React, Astro, and Remix frameworks. It uses client libraries like supabase-js and @supabase/ssr to implement robust authentication flows across these modern web frameworks.

What is the best way to handle JWT claims and user metadata in Supabase?

The best way to handle JWT claims is to avoid using raw_user_meta_data in JWTs and instead use correct app_metadata usage. Proper secret handling and safe management of JWT claims are required to reduce security risks.

How do I configure a new Supabase project with secure access controls?

Configure a new Supabase project by securely setting up authentication, database schemas, and storage with recommended access controls. Following structured guidance ensures secure configuration and reduces the risk of misconfigurations across edge services.

How do I verify Supabase database and Edge Functions against current documentation?

Verify Supabase database and Edge Functions against current documentation using MCP tooling guidance and provided references. This ensures your implementations follow up-to-date best practices and validated workflows across all Supabase products.

Can I use Supabase Storage and Realtime together without security misconfigurations?

You can use Supabase Storage and Realtime together without security misconfigurations by following a security checklist. This includes enforcing RLS defaults and proper secret handling to maintain consistent best practices across products.