supabase

Guides Supabase development tasks including auth, RLS policies, migrations, and CLI workflows.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/shoshoavi/agentic_worflows --skill supabase-shoshoavi
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/shoshoavi/agentic_worflows/tree/main/cursor/skills/supabase
Command: npx skills add https://github.com/shoshoavi/agentic_worflows --skill supabase-shoshoavi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve? Supabase features, CLI commands, and API conventions change frequently, and common mistakes like misconfigured RLS policies, exposed service keys, or broken migrations silently create security holes and failed deployments. This Skill provides verified, security-first guidance for any Supabase task. ## Core Features & Use Cases - Security-First Checklists: Enforces RLS on exposed schemas, prevents user_metadata authorization traps, and flags view/storage access pitfalls before they ship. - CLI and MCP Workflows: Discovers correct Supabase CLI commands via --help, troubleshoots MCP server connections, and handles version-specific gotchas like db query requiring CLI v2.79.0+. - Safe Schema Migrations: Iterates on schema changes with execute_sql, runs advisors, then commits clean migrations via supabase db pull without polluting migration history. - Use Case: When adding a new table with row-level security in a Next.js app, the Skill verifies current docs, writes correct RLS policies, runs security advisors, and generates a clean migration file. ## Quick Start Ask the agent to help you add a new table with RLS policies to your Supabase project and generate the migration file.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a Supabase migration file correctly?▼

Always create migration files with `supabase migration new <name>` rather than inventing filenames. Iterate on schema changes using `execute_sql` or `supabase db query`, then commit with `supabase db pull <name> --local --yes` after running advisors.

How do I set up RLS policies in Supabase?▼

Enable RLS on every table in exposed schemas like `public`, then write policies matching your actual access model. Never use `user_metadata` claims for authorization since they are user-editable; use `app_metadata` instead.

Why is my Supabase MCP server not connecting?▼

First check reachability with curl to https://mcp.supabase.com/mcp, where a 401 means the server is up. Then verify your `.mcp.json` configuration, and finally complete the OAuth 2.1 authentication flow in your browser.

Why does my Supabase UPDATE return zero rows with RLS enabled?▼

In Postgres RLS, an UPDATE requires a matching SELECT policy because the row must first be readable. Without a SELECT policy, updates silently affect zero rows with no error message.

Can I use the Supabase service_role key in my Next.js frontend?▼

No, never expose the service_role or secret key in public clients. Any `NEXT_PUBLIC_` environment variable is sent to the browser, so use publishable keys for frontend code instead.