What problem does it solve? Working with Supabase involves frequent API changes, subtle security traps (RLS bypasses, SECURITY DEFINER misuse, JWT claim pitfalls), and version-specific CLI behavior that training data often gets wrong. This Skill provides up-to-date operational guidance so AI agents implement Supabase features correctly and securely. ## Core Features & Use Cases - Security checklist enforcement: Covers RLS policies, views with security_invoker, SECURITY DEFINER functions, app_metadata vs user_metadata, storage access control, and BOLA/IDOR prevention. - Schema change workflows: Distinguishes declarative schemas from imperative migrations, with correct use of execute_sql, supabase db pull, and advisors before committing migrations. - CLI and MCP troubleshooting: Guides command discovery via --help, version-specific gotchas, and step-by-step MCP server connection diagnosis. - Use Case: When adding a new table with row-level security in a Next.js app, the Skill ensures the table is exposed via the Data API, RLS is enabled with proper TO authenticated + ownership predicates, and the migration is generated cleanly. ## Quick Start Ask the agent to help you implement any Supabase task, such as creating an RLS policy for a new table or troubleshooting an auth session issue.
