What problem does it solve? Building a web app without a framework often means reinventing auth, database security, and offline installability from scratch, and getting Supabase security wrong by hiding screens instead of enforcing Row Level Security. This Skill encodes a proven production stack (HTML, CSS, vanilla ES6 JavaScript, Supabase, PWA) so every table ships with RLS policies and every app ships installable. ## Core Features & Use Cases - Framework-free app generation: Creates or evolves apps with a three-file architecture (index.html, style.css, app.js), CDN-loaded libraries, and no build toolchain. - Supabase backend with RLS-first security: Generates tables with row level security enabled, per-owner policies via auth.uid(), email/password auth, and private Storage with signed URLs. - PWA and Play Store packaging: Produces manifest.json with maskable icons and .well-known/assetlinks.json for TWA publication, deployable to Vercel. - Use Case: Ask to add an owner-only "monthly goals" table to an existing app and receive the SQL with four RLS policies, a new screen section wired into navigation, and CRUD logic that trusts the RLS instead of re-filtering in JavaScript. ## Quick Start Ask the assistant to create a mobile-first web app without a framework, using Supabase for auth and database, packaged as an installable PWA.
