What problem does it solve? Working with Supabase involves frequent API changes, subtle security traps (RLS bypasses, SECURITY DEFINER misuse, JWT claim pitfalls), and version-specific CLI behavior that training data often gets wrong. This Skill keeps Supabase work accurate by enforcing changelog verification, current documentation lookup, and a structured security checklist. ## Core Features & Use Cases - Schema Management: Supports both declarative schemas (supabase/schemas/) and imperative migrations, with advisor checks and clean migration generation via supabase db pull. - Security Checklist: Covers RLS policies, TO authenticated vs ownership predicates, SECURITY DEFINER risks, storage upsert grants, and npm supply-chain pinning. - Debugging Workflows: Directs agents to fetch the Monitoring and Debugging docs before diagnosing REST API, Postgres, Auth, Realtime, Edge Function, or Storage errors. - Use Case: When a user reports that a newly created table returns permission denied through the REST API, the Skill walks through Data API exposure settings, explicit GRANTs, and RLS enablement. ## Quick Start Ask the agent to create a new Supabase table with RLS policies and generate a migration for it.
