What problem does it solve? Working with Supabase involves frequent API changes, subtle security traps (RLS bypasses, JWT misuse, exposed keys), and CLI version differences that cause silent failures. This Skill provides verified, security-first guidance for any Supabase task so implementations follow current documentation and avoid common vulnerabilities. ## Core Features & Use Cases - Security-first checklist: Covers Supabase-specific traps such as user_metadata in JWT claims, views bypassing RLS, UPDATE requiring SELECT policies, and storage upsert permission requirements. - CLI and MCP workflows: Guides correct usage of the Supabase CLI (migration creation, db diff, advisors) and the hosted MCP server, including version-specific gotchas and troubleshooting steps. - Schema change workflow: Enforces a safe iterate-then-commit pattern using execute_sql or db query, followed by advisors, db pull, and migration verification. - Use Case: When adding a new table with row-level security in a Next.js app, the Skill ensures RLS is enabled, policies match the real access model, and the change is committed as a clean migration file. ## Quick Start Ask the assistant to help you implement a Supabase task, such as creating an RLS policy or running a migration, and it will verify against current docs before writing any code.
