supabase

Manage Supabase project lifecycle with RLS policies and CLI operations.

1|Updated Jun 23, 2026
One-click install
npx skills add https://github.com/YOYOMAII/foundry --skill supabase-yoyomaii
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/YOYOMAII/foundry/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/YOYOMAII/foundry --skill supabase-yoyomaii

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the complexity of managing Supabase projects, helping developers avoid common security pitfalls, configuration errors, and outdated implementation patterns.

Core Features & Use Cases

  • Security Auditing: Provides a comprehensive checklist to prevent BOLA/IDOR vulnerabilities, RLS misconfigurations, and insecure JWT handling.
  • Database Management: Guides users through schema changes, migration generation, and proper use of Supabase CLI and MCP tools.
  • Use Case: When setting up a new table, use this Skill to ensure RLS policies are correctly implemented with both USING and WITH CHECK clauses, and to verify that the table is properly exposed to the Data API.

Quick Start

Use the supabase skill to audit the current RLS policies for the profiles table and suggest improvements based on the security checklist.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent BOLA and IDOR vulnerabilities in Supabase RLS policies?

Prevent BOLA and IDOR vulnerabilities in Supabase RLS policies by applying a security checklist that verifies both USING and WITH CHECK clauses are implemented, stopping insecure JWT handling and enforcing strict Postgres row-level access control.

What is the best way to manage database schema migrations using the Supabase CLI?

The best way to manage database schema migrations using the Supabase CLI is to follow expert guidance for generating migrations and applying schema changes. This ensures proper migration management and adherence to version-specific documentation.

How does Supabase handle authentication security and JWT management?

Supabase handles authentication security by enforcing security best practices for Postgres and Supabase-js, including strict JWT handling and RLS policy creation. This avoids common configuration errors and insecure implementation patterns.

Can I use Supabase MCP tools to audit and expose tables to the Data API?

Yes, you can use Supabase MCP tools to audit table configurations and verify that tables are properly exposed to the Data API. This ensures correct RLS policy implementation and secure API integration.

Why does my Supabase RLS policy fail to restrict data access correctly?

Supabase RLS policies fail to restrict data access correctly when misconfigurations occur, such as missing USING or WITH CHECK clauses. Auditing policies against a security checklist identifies these flaws and prevents BOLA vulnerabilities.