What problem does it solve? Supabase features, CLI commands, and API conventions change frequently, so relying on stale training data leads to broken implementations and silent security vulnerabilities like RLS bypasses and exposed service keys. This Skill provides current best practices, security checklists, and verification workflows for any Supabase task. ## Core Features & Use Cases - Security Checklist: Covers Supabase-specific traps such as user_metadata in JWT authorization, views bypassing RLS, UPDATE requiring SELECT policies, and storage upsert permissions. - Schema Change Workflow: Guides iterating with execute_sql or supabase db query, running advisors, and committing clean migrations via supabase db pull. - CLI and MCP Guidance: Explains discovering commands via --help, version-specific gotchas, and troubleshooting the Supabase MCP server connection and OAuth authentication. - Use Case: When adding a new table with row-level security in a Next.js app, use this Skill to write correct RLS policies, avoid security definer pitfalls, and generate a verified migration. ## Quick Start Ask the agent to help you implement a Supabase task such as creating an RLS policy or running a migration, and it will verify against current docs before writing any SQL.
