What problem does it solve? Working with Supabase involves frequent API changes, subtle security traps (RLS bypasses, SECURITY DEFINER misuse, JWT claim pitfalls), and version-specific CLI behavior that training data often gets wrong. This Skill keeps Supabase work accurate by enforcing changelog verification, current documentation lookups, and structured debugging workflows. ## Core Features & Use Cases - Security Checklist Enforcement: Covers Supabase-specific vulnerabilities including user_metadata in JWT authorization, views bypassing RLS, BOLA/IDOR in policies, SECURITY DEFINER exposure, and Storage upsert permissions. - Schema Change Workflows: Distinguishes declarative schema projects from imperative migrations, with correct use of execute_sql, db pull, and advisors before committing migrations. - Debugging & Troubleshooting: Directs agents to fetch the Monitoring and Debugging docs before diagnosing REST API errors, RLS blocks, Auth issues, Edge Function crashes, or Realtime drops. - Use Case: When a user reports a newly created table is inaccessible via the REST API, the Skill guides checking Data API settings, granting anon/authenticated roles access, and enabling RLS. ## Quick Start Ask the agent to help you create a new Supabase table with proper RLS policies and expose it to the Data API.
