Supabase Skill

Guardrails

• Never put Supabase service-role keys in client/browser code.

• Prefer RLS-default-deny for writes; public read only for published content.

• Ask before applying migrations to a real Supabase project.

Workflow checklist

• Read the canonical schema/RLS docs first.

• For DDL changes, prefer migrations and keep SQL deterministic/idempotent.

• Ensure RLS policies match the intended access model (admin-only writes).

• For server-side writes, validate inputs with Zod before DB calls.

• Use Supabase MCP for applying migrations, inspecting tables/policies, and fetching logs.