supabase

Diagnose Supabase RLS, migration, and Data API issues with verification queries.

Updated May 17, 2026
One-click install
npx skills add https://github.com/ohdaveed/director-hearing-manager --skill supabase-ohdaveed
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/ohdaveed/director-hearing-manager/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/ohdaveed/director-hearing-manager --skill supabase-ohdaveed

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

It helps you implement and troubleshoot Supabase features without breaking changes, security pitfalls, or unverified assumptions—especially around auth, RLS, and Data API exposure.

Core Features & Use Cases

  • Changelog-first implementation: checks Supabase’s changelog for breaking changes before applying changes.
  • Security guardrails: enforces best practices for RLS, auth/session handling, service role secrecy, and storage permissions.
  • Schema-change workflow: recommends safer SQL iteration (via execute_sql or db query) and a clean migration creation workflow when ready.
  • Verification and recovery: requires a confirmation query after fixes and discourages repeated retry loops after repeated failures.

Quick Start

Use this skill to fix a Supabase RLS policy or migration issue by asking: Apply Supabase guidance to diagnose why my table is inaccessible via the Data API, then propose the correct RLS and GRANT setup and the exact verification query to confirm it works.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix Supabase RLS policies making my table inaccessible via the Data API?

To fix Supabase RLS policies blocking Data API access, you must correct your row level security policies and ensure proper GRANT permissions are set for the appropriate roles. Verification requires running a confirmation query to confirm the API exposes the table correctly.

What is the safest way to apply schema changes and migrations in Supabase?

The safest way to apply schema changes in Supabase is iterating via SQL queries first, then creating a clean migration file when ready. You should check the Supabase changelog for breaking changes before applying modifications in production-like environments.

How does Supabase handle service role key security and storage permissions?

Supabase requires secure handling of service role keys to maintain strict secrecy and enforces best-practice guardrails for storage access control. This prevents unauthorized access and ensures auth and session handling follow security standards.

Why are my repeated Supabase migration retries failing after a schema change?

Repeated Supabase migration retries often fail because the workflow discourages continuous retry loops after initial failures. You must run a post-change verification query to diagnose the exact schema or RLS issue before attempting further fixes.

Can I use Supabase CLI and MCP operations for production-like database troubleshooting?

Yes, you can use Supabase CLI and MCP-based operations to troubleshoot database, auth, and storage workflows in production-like environments. This requires documentation-first decisions, correct role setup, and migration discipline to avoid breaking changes.

What are the limitations of relying on unverified assumptions during Supabase auth troubleshooting?

Relying on unverified assumptions during Supabase auth troubleshooting limits your ability to prevent security pitfalls and breaking changes. You must enforce changelog verification and post-change testing to ensure session handling and data exposure remain secure.