Supabase

Use this skill when working on Supabase tasks.

Workflow

Inspect project config, migrations, generated types, RLS policies, auth flow, and environment variables before changes.
Treat service-role keys and database URLs as secrets; prefer local development and migration review before production.
Validate RLS, schema changes, and auth edge cases with focused tests or SQL checks.
For performance work, start with the query shape and EXPLAIN plan before adding indexes, denormalizing data, or changing client code.
Review indexes with workload context, including candidate, redundant, partial, composite, and foreign-key indexes; use Supabase advisor tooling where available.
Check RLS policy performance separately from correctness. Avoid policy predicates that force avoidable per-row work on hot paths.
Use pg_stat_statements or equivalent query statistics to identify slow, frequent, or high-variance statements before optimizing.
Inspect connection pooling, transaction scope, lock waits, long-running transactions, and migration ordering when performance or deploy safety is involved.

Inspect the target repository before making changes.
Prefer existing project patterns, declared package managers, and documented validation commands.
Do not expose secrets, credentials, private user data, or production account identifiers in source, examples, or logs.
When external APIs or current vendor behavior matter, verify against official docs before implementation.
Primary Supabase docs for Postgres review:

Source: https://github.com/supabase/agent-skills
Ref: main at 1356046015476711a769601079262b5635929427
Source path: skills/supabase/SKILL.md
License classification: MIT
Source SHA-256: 1171386737b231610fa42485707272765c3516a9bbc0bd2c6c161a8cee3d7d33