#409 by GitHub stars

supabase/agent-skills

Agent Skills to help developers using AI agents with Supabase

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

`skills/supabase/SKILL.md`

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → c9be0e931b79

No earlier version was observed for comparison.

Compare on GitHub

`skills/supabase-postgres-best-practices/SKILL.md`

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Instructions only

First observation → c9be0e931b79

No earlier version was observed for comparison.

Compare on GitHub

View on GitHub Add to my skills

Verified commit c9be0e931b7930f7d02126d04774d904c381e7d7

Version-pinned installation · Claude Code

git clone --filter=blob:none --no-checkout https://github.com/supabase/agent-skills.git .hotskills/supabase-agent-skills && git -C .hotskills/supabase-agent-skills checkout --detach c9be0e931b7930f7d02126d04774d904c381e7d7
# Copy each selected skill directory from .hotskills/supabase-agent-skills into .claude/skills/<skill-name>/

Version-pinned installation · Codex

git clone --filter=blob:none --no-checkout https://github.com/supabase/agent-skills.git .hotskills/supabase-agent-skills && git -C .hotskills/supabase-agent-skills checkout --detach c9be0e931b7930f7d02126d04774d904c381e7d7
# Copy each selected skill directory from .hotskills/supabase-agent-skills into .agents/skills/<skill-name>/

3kGitHub stars

50stars in 7 days

2skills in this repository

0commits in 30 days

Heat

5.9

Star growth, last 7 daysAhead of 90% of tracked repositories
Star growth, last 24 hoursAhead of 90% of tracked repositories
Rank movement, last 7 daysAhead of 47% of tracked repositories
Commits, last 30 daysAhead of 0% of tracked repositories
Accounts asking about it through MCP, last 7 daysNot available
Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Individual skills in this repository

supabase skills/supabase
supabase-postgres-best-practices skills/supabase-postgres-best-practices

How it works

Choose a skill

supabase

When your agent uses it

Use when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); debugging and troubleshooting errors or unexpected behavior on Supabase projects (HTTP errors, Postgres errors, RLS surprises, permission denied, schema cache issues, timeouts, Edge Function crashes, Realtime drops, Storage failures) and reading or querying logs (Logs Explorer, ClickHouse).

What it loads into context

Frontmatter

209 tokens

Always available to the agent

SKILL.md

3,249 tokens

When the skill is activated

Reference documents

18,597 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

Core Principles
Supabase CLI
Supabase MCP Server
Supabase Documentation
Making and Committing Schema Changes
Debugging
Reference Guides

Files

../../.claude-plugin/marketplace.jsonasset1,161 bytes
../supabase-postgres-best-practices/CHANGELOG.mddoc5,684 bytes
../supabase-postgres-best-practices/SKILL.mddoc3,231 bytes
../supabase-postgres-best-practices/references/_contributing.mddoc4,113 bytes
../supabase-postgres-best-practices/references/_sections.mddoc1,682 bytes
../supabase-postgres-best-practices/references/_template.mddoc1,040 bytes
../supabase-postgres-best-practices/references/advanced-full-text-search.mddoc1,468 bytes
../supabase-postgres-best-practices/references/advanced-jsonb-indexing.mddoc1,444 bytes
../supabase-postgres-best-practices/references/conn-idle-timeout.mddoc1,282 bytes
../supabase-postgres-best-practices/references/conn-limits.mddoc1,325 bytes
../supabase-postgres-best-practices/references/conn-pooling.mddoc1,382 bytes
../supabase-postgres-best-practices/references/conn-prepared-statements.mddoc1,529 bytes
../supabase-postgres-best-practices/references/data-batch-inserts.mddoc1,287 bytes
../supabase-postgres-best-practices/references/data-n-plus-one.mddoc1,361 bytes
../supabase-postgres-best-practices/references/data-pagination.mddoc1,358 bytes
../supabase-postgres-best-practices/references/data-upsert.mddoc1,390 bytes
../supabase-postgres-best-practices/references/lock-advisory.mddoc1,531 bytes
../supabase-postgres-best-practices/references/lock-deadlock-prevention.mddoc1,855 bytes
../supabase-postgres-best-practices/references/lock-short-transactions.mddoc1,350 bytes
../supabase-postgres-best-practices/references/lock-skip-locked.mddoc1,353 bytes
../supabase-postgres-best-practices/references/monitor-explain-analyze.mddoc1,441 bytes
../supabase-postgres-best-practices/references/monitor-pg-stat-statements.mddoc1,418 bytes
../supabase-postgres-best-practices/references/monitor-vacuum-analyze.mddoc1,506 bytes
../supabase-postgres-best-practices/references/query-composite-indexes.mddoc1,454 bytes
../supabase-postgres-best-practices/references/query-covering-indexes.mddoc1,287 bytes
../supabase-postgres-best-practices/references/query-index-types.mddoc1,521 bytes
../supabase-postgres-best-practices/references/query-missing-indexes.mddoc1,218 bytes
../supabase-postgres-best-practices/references/query-partial-indexes.mddoc1,347 bytes
../supabase-postgres-best-practices/references/schema-constraints.mddoc1,880 bytes
../supabase-postgres-best-practices/references/schema-data-types.mddoc1,453 bytes
../supabase-postgres-best-practices/references/schema-foreign-key-indexes.mddoc1,679 bytes
../supabase-postgres-best-practices/references/schema-lowercase-identifiers.mddoc1,728 bytes
../supabase-postgres-best-practices/references/schema-partitioning.mddoc1,548 bytes
../supabase-postgres-best-practices/references/schema-primary-keys.mddoc1,821 bytes
../supabase-postgres-best-practices/references/security-privileges.mddoc1,566 bytes
../supabase-postgres-best-practices/references/security-rls-basics.mddoc1,372 bytes
../supabase-postgres-best-practices/references/security-rls-performance.mddoc2,103 bytes
CHANGELOG.mddoc8,345 bytes
SKILL.mdcore14,307 bytes
SKILL.mdcore14,307 bytes
assets/feedback-issue-template.mddoc459 bytes
references/skill-feedback.mddoc1,035 bytes

Read SKILL.md


# Supabase

## Core Principles

**1. Supabase changes frequently — verify against changelog and current docs before implementing.**
Do not rely on training data for Supabase features. Function signatures, config.toml settings, and API conventions change between versions.

First, fetch `https://supabase.com/changelog.md` (a lightweight summary index — not a heavy pull), scan for `breaking-change` tags relevant to your task, and follow the linked page for any that apply. Then look up the relevant topic using the documentation access methods below.

**2. Verify your work.**
After implementing any fix, run a test query to confirm the change works. A fix without verification is incomplete.

**3. Recover from errors, don't loop.**
If an approach fails after 2-3 attempts, stop and reconsider. Try a different method, check documentation, inspect the error more carefully, and review relevant logs when available. Supabase issues are not always solved by retrying the same command, and the answer is not always in the logs, but logs are often worth checking before proceeding.

View the complete source on GitHub

supabase-postgres-best-practices

When your agent uses it

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating or altering tables and columns (including choosing column types), schema design, migrations and declarative schema files, RLS policies and the tests that verify them, indexes, triggers, database functions, queues and scheduled jobs (pg_cron, pgmq), vector/semantic search (pgvector), and restoring dumps (pg_restore) or importing data. Also load it when diagnosing slow queries, high CPU, timeouts, EXPLAIN plans, connection exhaustion, locking, bloat, or rows visible to the wrong user or tenant. This is not just a performance guide — schema, migration, security, and SQL authoring tasks need these rules too, even for a one-column change or a single query.

What it loads into context

Frontmatter

296 tokens

Always available to the agent

SKILL.md

707 tokens

When the skill is activated

Reference documents

14,562 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

When to Apply
Rule Categories by Priority
How to Use
References

Files

CHANGELOG.mddoc5,684 bytes
SKILL.mdcore3,231 bytes
references/_contributing.mddoc4,113 bytes
references/_sections.mddoc1,682 bytes
references/_template.mddoc1,040 bytes
references/advanced-full-text-search.mddoc1,468 bytes
references/advanced-jsonb-indexing.mddoc1,444 bytes
references/conn-idle-timeout.mddoc1,282 bytes
references/conn-limits.mddoc1,325 bytes
references/conn-pooling.mddoc1,382 bytes
references/conn-prepared-statements.mddoc1,529 bytes
references/data-batch-inserts.mddoc1,287 bytes
references/data-n-plus-one.mddoc1,361 bytes
references/data-pagination.mddoc1,358 bytes
references/data-upsert.mddoc1,390 bytes
references/lock-advisory.mddoc1,531 bytes
references/lock-deadlock-prevention.mddoc1,855 bytes
references/lock-short-transactions.mddoc1,350 bytes
references/lock-skip-locked.mddoc1,353 bytes
references/monitor-explain-analyze.mddoc1,441 bytes
references/monitor-pg-stat-statements.mddoc1,418 bytes
references/monitor-vacuum-analyze.mddoc1,506 bytes
references/query-composite-indexes.mddoc1,454 bytes
references/query-covering-indexes.mddoc1,287 bytes
references/query-index-types.mddoc1,521 bytes
references/query-missing-indexes.mddoc1,218 bytes
references/query-partial-indexes.mddoc1,347 bytes
references/schema-constraints.mddoc1,880 bytes
references/schema-data-types.mddoc1,453 bytes
references/schema-foreign-key-indexes.mddoc1,679 bytes
references/schema-lowercase-identifiers.mddoc1,728 bytes
references/schema-partitioning.mddoc1,548 bytes
references/schema-primary-keys.mddoc1,821 bytes
references/security-privileges.mddoc1,566 bytes
references/security-rls-basics.mddoc1,372 bytes
references/security-rls-performance.mddoc2,103 bytes

Read SKILL.md


# Supabase Postgres Best Practices

Comprehensive performance optimization guide for Postgres, maintained by Supabase. Contains rules across 8 categories, prioritized by impact to guide automated query optimization and schema design.

## When to Apply

Reference these guidelines when:
- Writing SQL queries or designing schemas
- Implementing indexes or query optimization
- Reviewing database performance issues
- Configuring connection pooling or scaling
- Optimizing for Postgres-specific features
- Working with Row-Level Security (RLS)

View the complete source on GitHub

Skills included

supabase
supabase-postgres-best-practices

Repository facts

License: MIT
Created: Jan 16, 2026
Last pushed: Nov 5, 2026
Forks: 264
Open issues: 479
Project activity: Slowing

Rank over the last 12 weeks

Now #409 · best #327 · down 38 in 30 days

#401 on Oct 29
#402 from Oct 30 to Nov 1
#403 on Nov 2
#405 from Nov 3 to Nov 4
#408 on Nov 5
#409 since Nov 6

73 earlier periods

#313 on Aug 2
#318 on Aug 7
#320 on Aug 8
#318 on Aug 9
#327 on Aug 10
#329 on Aug 11
#324 on Aug 12
#329 from Aug 13 to Aug 14
#327 on Aug 15
#331 on Aug 16
#336 on Aug 18
#335 on Aug 19
#334 on Aug 20
#337 on Aug 21
#332 on Aug 22
#337 on Aug 23
#340 on Aug 24
#341 on Aug 25
#338 on Aug 26
#339 on Aug 27
#342 on Aug 28
#341 on Aug 29
#337 on Aug 30
#346 on Aug 31
#352 on Sep 1
#347 on Sep 2
#351 on Sep 3
#344 on Sep 4
#347 from Sep 5 to Sep 6
#357 on Sep 7
#353 on Sep 8
#357 on Sep 9
#356 on Sep 10
#352 on Sep 11
#356 on Sep 12
#357 on Sep 13
#361 on Sep 14
#362 on Sep 15
#360 on Sep 16
#358 on Sep 17
#360 on Sep 18
#353 on Sep 19
#366 on Sep 20
#364 on Sep 21
#368 on Sep 22
#364 from Sep 23 to Sep 24
#363 on Sep 25
#360 on Sep 26
#364 on Sep 27
#367 on Sep 28
#375 on Sep 29
#372 from Sep 30 to Oct 2
#365 on Oct 3
#362 on Oct 4
#367 from Oct 5 to Oct 6
#371 on Oct 7
#380 on Oct 9
#371 on Oct 10
#369 on Oct 11
#376 from Oct 12 to Oct 13
#378 on Oct 14
#373 on Oct 15
#378 on Oct 16
#372 on Oct 17
#379 on Oct 18
#381 on Oct 19
#382 on Oct 20
#381 on Oct 21
#383 on Oct 22
#382 on Oct 23
#375 on Oct 24
#393 on Oct 25
#399 on Oct 28

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 2, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 1 note

skills/supabase/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed

No broad tool permissions
No dangerous shell commands
198 network referencesin 38 files: skills/supabase-postgres-best-practices/CHANGELOG.md:3 supabase/CHANGELOG.md:3 supabase/SKILL.md:16 and 35 more
No hidden or obfuscated text
No instruction overrides
No executable scripts
1 reference to secretsin 1 file: supabase/SKILL.md:92
No requests to vote in Hot

Show all 199 signals by file

`skills/supabase-postgres-best-practices/CHANGELOG.md`

Network accessline 3

## [1.6.0](https://github.com/supabase/agent-skills/compare/supabase-postgres-best-practices-v1.5.0...supabase-postgres-best-practices-v1.6.0) (2026-07-30)

Network accessline 3

## [1.6.0](https://github.com/supabase/agent-skills/compare/supabase-postgres-best-practices-v1.5.0...supabase-postgres-best-practices-v1.6.0) (2026-07-30)

Network accessline 8

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 8

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 9

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 9

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 14

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 14

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 15

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 15

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 16

* **supabase-postgres-best-practices:** make skill description trigger-rich ([#194](https://github.com/supabase/agent-skills/issues/194)) ([3291216](https://github.com/supabase/agent-skills/commit/32912161e2732c3e5001c6811a76c1f8308ed0da))

Network accessline 16

* **supabase-postgres-best-practices:** make skill description trigger-rich ([#194](https://github.com/supabase/agent-skills/issues/194)) ([3291216](https://github.com/supabase/agent-skills/commit/32912161e2732c3e5001c6811a76c1f8308ed0da))

Network accessline 18

## [1.5.0](https://github.com/supabase/agent-skills/compare/supabase-postgres-best-practices-v1.4.0...supabase-postgres-best-practices-v1.5.0) (2026-07-30)

Network accessline 18

## [1.5.0](https://github.com/supabase/agent-skills/compare/supabase-postgres-best-practices-v1.4.0...supabase-postgres-best-practices-v1.5.0) (2026-07-30)

Network accessline 23

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 23

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 24

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 24

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 29

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 29

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 30

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 30

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 31

* **supabase-postgres-best-practices:** make skill description trigger-rich ([#194](https://github.com/supabase/agent-skills/issues/194)) ([3291216](https://github.com/supabase/agent-skills/commit/32912161e2732c3e5001c6811a76c1f8308ed0da))

Network accessline 31

* **supabase-postgres-best-practices:** make skill description trigger-rich ([#194](https://github.com/supabase/agent-skills/issues/194)) ([3291216](https://github.com/supabase/agent-skills/commit/32912161e2732c3e5001c6811a76c1f8308ed0da))

Network accessline 33

## [1.4.0](https://github.com/supabase/agent-skills/compare/v1.3.0...v1.4.0) (2026-07-10)

Network accessline 33

## [1.4.0](https://github.com/supabase/agent-skills/compare/v1.3.0...v1.4.0) (2026-07-10)

Network accessline 38

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 38

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 39

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 39

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 44

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 44

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 45

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 45

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 47

## [1.3.0](https://github.com/supabase/agent-skills/compare/v1.2.0...v1.3.0) (2026-06-05)

Network accessline 47

## [1.3.0](https://github.com/supabase/agent-skills/compare/v1.2.0...v1.3.0) (2026-06-05)

Network accessline 52

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 52

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 53

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 53

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 58

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 58

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 59

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 59

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 61

## [1.2.0](https://github.com/supabase/agent-skills/compare/v1.1.1...v1.2.0) (2026-06-02)

Network accessline 61

## [1.2.0](https://github.com/supabase/agent-skills/compare/v1.1.1...v1.2.0) (2026-06-02)

Network accessline 66

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 66

* add schema-constraints reference for safe migration patterns ([#30](https://github.com/supabase/agent-skills/issues/30)) ([9b236f3](https://github.com/supabase/agent-skills/commit/9b236f3ebd65d76a2c570f19931353da9c858d5a))

Network accessline 67

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 67

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 72

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 72

* correct broken reference link in postgres best practices skill ([#58](https://github.com/supabase/agent-skills/issues/58)) ([f4e2277](https://github.com/supabase/agent-skills/commit/f4e22777fd8573537297b568c16e5a45a25927da))

Network accessline 73

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 73

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

`skills/supabase-postgres-best-practices/SKILL.md`

Network accessline 60

- https://www.postgresql.org/docs/current/

Network accessline 60

- https://www.postgresql.org/docs/current/

Network accessline 61
```
- https://supabase.com/docs
```
Network accessline 61
```
- https://supabase.com/docs
```

Network accessline 62

- https://wiki.postgresql.org/wiki/Performance_Optimization

Network accessline 62

- https://wiki.postgresql.org/wiki/Performance_Optimization

Network accessline 63

- https://supabase.com/docs/guides/database/overview

Network accessline 63

- https://supabase.com/docs/guides/database/overview

Network accessline 64

- https://supabase.com/docs/guides/auth/row-level-security

Network accessline 64

- https://supabase.com/docs/guides/auth/row-level-security

`skills/supabase-postgres-best-practices/references/_contributing.md`

Network accessline 150

Reference: [Postgres Indexes](https://www.postgresql.org/docs/current/indexes.html)

Network accessline 150

Reference: [Postgres Indexes](https://www.postgresql.org/docs/current/indexes.html)

Network accessline 151

[Postgres Indexes](https://www.postgresql.org/docs/current/indexes.html)

Network accessline 151

[Postgres Indexes](https://www.postgresql.org/docs/current/indexes.html)

`skills/supabase-postgres-best-practices/references/_template.md`

Network accessline 34

Reference: [Postgres Docs](https://www.postgresql.org/docs/current/)

Network accessline 34

Reference: [Postgres Docs](https://www.postgresql.org/docs/current/)

`skills/supabase-postgres-best-practices/references/advanced-full-text-search.md`

Network accessline 55

Reference: [Full Text Search](https://supabase.com/docs/guides/database/full-text-search)

Network accessline 55

Reference: [Full Text Search](https://supabase.com/docs/guides/database/full-text-search)

`skills/supabase-postgres-best-practices/references/advanced-jsonb-indexing.md`

Network accessline 49

Reference: [JSONB Indexes](https://www.postgresql.org/docs/current/datatype-json.html#JSON-INDEXING)

Network accessline 49

Reference: [JSONB Indexes](https://www.postgresql.org/docs/current/datatype-json.html#JSON-INDEXING)

`skills/supabase-postgres-best-practices/references/conn-idle-timeout.md`

Network accessline 46

Reference: [Connection Timeouts](https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT)

Network accessline 46

Reference: [Connection Timeouts](https://www.postgresql.org/docs/current/runtime-config-client.html#GUC-IDLE-IN-TRANSACTION-SESSION-TIMEOUT)

`skills/supabase-postgres-best-practices/references/conn-limits.md`

Network accessline 44

Reference: [Database Connections](https://supabase.com/docs/guides/platform/performance#connection-management)

Network accessline 44

Reference: [Database Connections](https://supabase.com/docs/guides/platform/performance#connection-management)

`skills/supabase-postgres-best-practices/references/conn-pooling.md`

Network accessline 41

Reference: [Connection Pooling](https://supabase.com/docs/guides/database/connecting-to-postgres#connection-pooler)

Network accessline 41

Reference: [Connection Pooling](https://supabase.com/docs/guides/database/connecting-to-postgres#connection-pooler)

`skills/supabase-postgres-best-practices/references/conn-prepared-statements.md`

Network accessline 46

Reference: [Prepared Statements with Pooling](https://supabase.com/docs/guides/database/connecting-to-postgres#connection-pool-modes)

Network accessline 46

Reference: [Prepared Statements with Pooling](https://supabase.com/docs/guides/database/connecting-to-postgres#connection-pool-modes)

`skills/supabase-postgres-best-practices/references/data-batch-inserts.md`

Network accessline 54

Reference: [COPY](https://www.postgresql.org/docs/current/sql-copy.html)

Network accessline 54

Reference: [COPY](https://www.postgresql.org/docs/current/sql-copy.html)

`skills/supabase-postgres-best-practices/references/data-n-plus-one.md`

Network accessline 53

Reference: [N+1 Query Problem](https://supabase.com/docs/guides/database/query-optimization)

Network accessline 53

Reference: [N+1 Query Problem](https://supabase.com/docs/guides/database/query-optimization)

`skills/supabase-postgres-best-practices/references/data-pagination.md`

Network accessline 50

Reference: [Pagination](https://supabase.com/docs/guides/database/pagination)

Network accessline 50

Reference: [Pagination](https://supabase.com/docs/guides/database/pagination)

`skills/supabase-postgres-best-practices/references/data-upsert.md`

Network accessline 50

Reference: [INSERT ON CONFLICT](https://www.postgresql.org/docs/current/sql-insert.html#SQL-ON-CONFLICT)

Network accessline 50

Reference: [INSERT ON CONFLICT](https://www.postgresql.org/docs/current/sql-insert.html#SQL-ON-CONFLICT)

`skills/supabase-postgres-best-practices/references/lock-advisory.md`

Network accessline 56

Reference: [Advisory Locks](https://www.postgresql.org/docs/current/explicit-locking.html#ADVISORY-LOCKS)

Network accessline 56

Reference: [Advisory Locks](https://www.postgresql.org/docs/current/explicit-locking.html#ADVISORY-LOCKS)

`skills/supabase-postgres-best-practices/references/lock-deadlock-prevention.md`

Network accessline 67

Reference: [Deadlocks](https://www.postgresql.org/docs/current/explicit-locking.html#LOCKING-DEADLOCKS)

Network accessline 67

Reference: [Deadlocks](https://www.postgresql.org/docs/current/explicit-locking.html#LOCKING-DEADLOCKS)

Network accessline 68

[Deadlocks](https://www.postgresql.org/docs/current/explicit-locking.html#LOCKING-DEADLOCKS)

Network accessline 68

[Deadlocks](https://www.postgresql.org/docs/current/explicit-locking.html#LOCKING-DEADLOCKS)

`skills/supabase-postgres-best-practices/references/lock-short-transactions.md`

Network accessline 50

Reference: [Transaction Management](https://www.postgresql.org/docs/current/tutorial-transactions.html)

Network accessline 50

Reference: [Transaction Management](https://www.postgresql.org/docs/current/tutorial-transactions.html)

`skills/supabase-postgres-best-practices/references/lock-skip-locked.md`

Network accessline 54

Reference: [SELECT FOR UPDATE SKIP LOCKED](https://www.postgresql.org/docs/current/sql-select.html#SQL-FOR-UPDATE-SHARE)

Network accessline 54

Reference: [SELECT FOR UPDATE SKIP LOCKED](https://www.postgresql.org/docs/current/sql-select.html#SQL-FOR-UPDATE-SHARE)

`skills/supabase-postgres-best-practices/references/monitor-explain-analyze.md`

Network accessline 45

Reference: [EXPLAIN](https://supabase.com/docs/guides/database/inspect)

Network accessline 45

Reference: [EXPLAIN](https://supabase.com/docs/guides/database/inspect)

`skills/supabase-postgres-best-practices/references/monitor-pg-stat-statements.md`

Network accessline 55

Reference: [pg_stat_statements](https://supabase.com/docs/guides/database/extensions/pg_stat_statements)

Network accessline 55

Reference: [pg_stat_statements](https://supabase.com/docs/guides/database/extensions/pg_stat_statements)

`skills/supabase-postgres-best-practices/references/monitor-vacuum-analyze.md`

Network accessline 55

Reference: [VACUUM](https://supabase.com/docs/guides/database/database-size#vacuum-operations)

Network accessline 55

Reference: [VACUUM](https://supabase.com/docs/guides/database/database-size#vacuum-operations)

`skills/supabase-postgres-best-practices/references/query-composite-indexes.md`

Network accessline 44

Reference: [Multicolumn Indexes](https://www.postgresql.org/docs/current/indexes-multicolumn.html)

Network accessline 44

Reference: [Multicolumn Indexes](https://www.postgresql.org/docs/current/indexes-multicolumn.html)

`skills/supabase-postgres-best-practices/references/query-covering-indexes.md`

Network accessline 40

Reference: [Index-Only Scans](https://www.postgresql.org/docs/current/indexes-index-only-scans.html)

Network accessline 40

Reference: [Index-Only Scans](https://www.postgresql.org/docs/current/indexes-index-only-scans.html)

`skills/supabase-postgres-best-practices/references/query-index-types.md`

Network accessline 48

Reference: [Index Types](https://www.postgresql.org/docs/current/indexes-types.html)

Network accessline 48

Reference: [Index Types](https://www.postgresql.org/docs/current/indexes-types.html)

`skills/supabase-postgres-best-practices/references/query-missing-indexes.md`

Network accessline 43

Reference: [Query Optimization](https://supabase.com/docs/guides/database/query-optimization)

Network accessline 43

Reference: [Query Optimization](https://supabase.com/docs/guides/database/query-optimization)

`skills/supabase-postgres-best-practices/references/query-partial-indexes.md`

Network accessline 45

Reference: [Partial Indexes](https://www.postgresql.org/docs/current/indexes-partial.html)

Network accessline 45

Reference: [Partial Indexes](https://www.postgresql.org/docs/current/indexes-partial.html)

`skills/supabase-postgres-best-practices/references/schema-constraints.md`

Network accessline 80

Reference: [Constraints](https://www.postgresql.org/docs/current/ddl-constraints.html)

Network accessline 80

Reference: [Constraints](https://www.postgresql.org/docs/current/ddl-constraints.html)

`skills/supabase-postgres-best-practices/references/schema-data-types.md`

Network accessline 46

Reference: [Data Types](https://www.postgresql.org/docs/current/datatype.html)

Network accessline 46

Reference: [Data Types](https://www.postgresql.org/docs/current/datatype.html)

`skills/supabase-postgres-best-practices/references/schema-foreign-key-indexes.md`

Network accessline 59

Reference: [Foreign Keys](https://www.postgresql.org/docs/current/ddl-constraints.html#DDL-CONSTRAINTS-FK)

Network accessline 59

Reference: [Foreign Keys](https://www.postgresql.org/docs/current/ddl-constraints.html#DDL-CONSTRAINTS-FK)

`skills/supabase-postgres-best-practices/references/schema-lowercase-identifiers.md`

Network accessline 55

Reference: [Identifiers and Key Words](https://www.postgresql.org/docs/current/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS)

Network accessline 55

Reference: [Identifiers and Key Words](https://www.postgresql.org/docs/current/sql-syntax-lexical.html#SQL-SYNTAX-IDENTIFIERS)

`skills/supabase-postgres-best-practices/references/schema-partitioning.md`

Network accessline 55

Reference: [Table Partitioning](https://www.postgresql.org/docs/current/ddl-partitioning.html)

Network accessline 55

Reference: [Table Partitioning](https://www.postgresql.org/docs/current/ddl-partitioning.html)

`skills/supabase-postgres-best-practices/references/schema-primary-keys.md`

Network accessline 60

Reference: [Identity Columns](https://www.postgresql.org/docs/current/sql-createtable.html#SQL-CREATETABLE-PARMS-GENERATED-IDENTITY)

Network accessline 60

Reference: [Identity Columns](https://www.postgresql.org/docs/current/sql-createtable.html#SQL-CREATETABLE-PARMS-GENERATED-IDENTITY)

Network accessline 61

[Identity Columns](https://www.postgresql.org/docs/current/sql-createtable.html#SQL-CREATETABLE-PARMS-GENERATED-IDENTITY)

Network accessline 61

[Identity Columns](https://www.postgresql.org/docs/current/sql-createtable.html#SQL-CREATETABLE-PARMS-GENERATED-IDENTITY)

`skills/supabase-postgres-best-practices/references/security-privileges.md`

Network accessline 54

Reference: [Roles and Privileges](https://supabase.com/blog/postgres-roles-and-privileges)

Network accessline 54

Reference: [Roles and Privileges](https://supabase.com/blog/postgres-roles-and-privileges)

`skills/supabase-postgres-best-practices/references/security-rls-basics.md`

Network accessline 50

Reference: [Row Level Security](https://supabase.com/docs/guides/database/postgres/row-level-security)

Network accessline 50

Reference: [Row Level Security](https://supabase.com/docs/guides/database/postgres/row-level-security)

`skills/supabase-postgres-best-practices/references/security-rls-performance.md`

Network accessline 63

Reference: [RLS Performance](https://supabase.com/docs/guides/database/postgres/row-level-security#rls-performance-recommendations)

Network accessline 63

Reference: [RLS Performance](https://supabase.com/docs/guides/database/postgres/row-level-security#rls-performance-recommendations)

`skills/supabase/CHANGELOG.md`

Network accessline 3

## [0.1.9](https://github.com/supabase/agent-skills/compare/v0.1.8...supabase-v0.1.9) (2026-09-28)

Network accessline 8

* **supabase:** recommend scoped personal access tokens for the Management API, CLI, and MCP ([#604](https://github.com/supabase/agent-skills/issues/604)) ([551274e](https://github.com/supabase/agent-skills/commit/551274ed2fe97c8fea1325f7ce

Network accessline 10

## [0.1.8](https://github.com/supabase/agent-skills/compare/v0.1.7...supabase-v0.1.8) (2026-09-24)

Network accessline 15

* **supabase:** add debugging workflows to the supabase skill ([#112](https://github.com/supabase/agent-skills/issues/112)) ([3a4f0ce](https://github.com/supabase/agent-skills/commit/3a4f0ce0782e0cbdcf187c362e8d15d9e324462b))

Network accessline 20

* **supabase:** recommend scoped personal access tokens for the Management API, CLI, and MCP ([#604](https://github.com/supabase/agent-skills/issues/604)) ([551274e](https://github.com/supabase/agent-skills/commit/551274ed2fe97c8fea1325f7ce

Network accessline 22

## [0.1.7](https://github.com/supabase/agent-skills/compare/v0.1.6...supabase-v0.1.7) (2026-08-12)

Network accessline 27

* **supabase:** add debugging workflows to the supabase skill ([#112](https://github.com/supabase/agent-skills/issues/112)) ([3a4f0ce](https://github.com/supabase/agent-skills/commit/3a4f0ce0782e0cbdcf187c362e8d15d9e324462b))

Network accessline 29

## [0.1.6](https://github.com/supabase/agent-skills/compare/v0.1.5...supabase-v0.1.6) (2026-07-30)

Network accessline 34

* add declarative schema section to schema management ([#120](https://github.com/supabase/agent-skills/issues/120)) ([94cf44f](https://github.com/supabase/agent-skills/commit/94cf44ff3a123edcf54a9af373929798cddefed8))

Network accessline 35

* add instructions to check changelog ([#74](https://github.com/supabase/agent-skills/issues/74)) ([4bb13d8](https://github.com/supabase/agent-skills/commit/4bb13d858d19f1f848505a66f46fc9603fdcde95))

Network accessline 36

* add npm supply-chain security guidance to supabase skill ([#94](https://github.com/supabase/agent-skills/issues/94)) ([82df90a](https://github.com/supabase/agent-skills/commit/82df90a5de1cd84386d8bc192746e50343b86dc0))

Network accessline 37

* instructions on exposing tables to the data api ([#71](https://github.com/supabase/agent-skills/issues/71)) ([f15a5a4](https://github.com/supabase/agent-skills/commit/f15a5a40779072a530c9e53c3f14ec4131118ea6))

Network accessline 38

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 43

* bump supabase skill to v0.1.1 and fix Data API broken link ([#72](https://github.com/supabase/agent-skills/issues/72)) ([5a6542e](https://github.com/supabase/agent-skills/commit/5a6542e08fc026d90c9a6a0f5a67749e9ceb9946))

Network accessline 44

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 45

* update Data API doc link and bump supabase skill to v0.1.1 ([#73](https://github.com/supabase/agent-skills/issues/73)) ([e5f7a7c](https://github.com/supabase/agent-skills/commit/e5f7a7cfd697765848ffd6a4505f3c02e1ee17ee))

Network accessline 47

## [0.1.5](https://github.com/supabase/agent-skills/compare/v0.1.4...v0.1.5) (2026-07-10)

Network accessline 52

* add declarative schema section to schema management ([#120](https://github.com/supabase/agent-skills/issues/120)) ([94cf44f](https://github.com/supabase/agent-skills/commit/94cf44ff3a123edcf54a9af373929798cddefed8))

Network accessline 53

* add instructions to check changelog ([#74](https://github.com/supabase/agent-skills/issues/74)) ([4bb13d8](https://github.com/supabase/agent-skills/commit/4bb13d858d19f1f848505a66f46fc9603fdcde95))

Network accessline 54

* add npm supply-chain security guidance to supabase skill ([#94](https://github.com/supabase/agent-skills/issues/94)) ([82df90a](https://github.com/supabase/agent-skills/commit/82df90a5de1cd84386d8bc192746e50343b86dc0))

Network accessline 55

* instructions on exposing tables to the data api ([#71](https://github.com/supabase/agent-skills/issues/71)) ([f15a5a4](https://github.com/supabase/agent-skills/commit/f15a5a40779072a530c9e53c3f14ec4131118ea6))

Network accessline 56

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 61

* bump supabase skill to v0.1.1 and fix Data API broken link ([#72](https://github.com/supabase/agent-skills/issues/72)) ([5a6542e](https://github.com/supabase/agent-skills/commit/5a6542e08fc026d90c9a6a0f5a67749e9ceb9946))

Network accessline 62

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 63

* update Data API doc link and bump supabase skill to v0.1.1 ([#73](https://github.com/supabase/agent-skills/issues/73)) ([e5f7a7c](https://github.com/supabase/agent-skills/commit/e5f7a7cfd697765848ffd6a4505f3c02e1ee17ee))

Network accessline 65

## [0.1.4](https://github.com/supabase/agent-skills/compare/v0.1.3...v0.1.4) (2026-06-05)

Network accessline 70

* add instructions to check changelog ([#74](https://github.com/supabase/agent-skills/issues/74)) ([4bb13d8](https://github.com/supabase/agent-skills/commit/4bb13d858d19f1f848505a66f46fc9603fdcde95))

Network accessline 71

* add npm supply-chain security guidance to supabase skill ([#94](https://github.com/supabase/agent-skills/issues/94)) ([82df90a](https://github.com/supabase/agent-skills/commit/82df90a5de1cd84386d8bc192746e50343b86dc0))

Network accessline 72

* instructions on exposing tables to the data api ([#71](https://github.com/supabase/agent-skills/issues/71)) ([f15a5a4](https://github.com/supabase/agent-skills/commit/f15a5a40779072a530c9e53c3f14ec4131118ea6))

Network accessline 73

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 78

* bump supabase skill to v0.1.1 and fix Data API broken link ([#72](https://github.com/supabase/agent-skills/issues/72)) ([5a6542e](https://github.com/supabase/agent-skills/commit/5a6542e08fc026d90c9a6a0f5a67749e9ceb9946))

Network accessline 79

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 80

* update Data API doc link and bump supabase skill to v0.1.1 ([#73](https://github.com/supabase/agent-skills/issues/73)) ([e5f7a7c](https://github.com/supabase/agent-skills/commit/e5f7a7cfd697765848ffd6a4505f3c02e1ee17ee))

Network accessline 82

## [0.1.3](https://github.com/supabase/agent-skills/compare/v0.1.2...v0.1.3) (2026-06-02)

Network accessline 87

* add instructions to check changelog ([#74](https://github.com/supabase/agent-skills/issues/74)) ([4bb13d8](https://github.com/supabase/agent-skills/commit/4bb13d858d19f1f848505a66f46fc9603fdcde95))

Network accessline 88

* add npm supply-chain security guidance to supabase skill ([#94](https://github.com/supabase/agent-skills/issues/94)) ([82df90a](https://github.com/supabase/agent-skills/commit/82df90a5de1cd84386d8bc192746e50343b86dc0))

Network accessline 89

* instructions on exposing tables to the data api ([#71](https://github.com/supabase/agent-skills/issues/71)) ([f15a5a4](https://github.com/supabase/agent-skills/commit/f15a5a40779072a530c9e53c3f14ec4131118ea6))

Network accessline 90

* using Supabase agent skills ([#12](https://github.com/supabase/agent-skills/issues/12)) ([7c2e389](https://github.com/supabase/agent-skills/commit/7c2e3894fddfde8eb6c77d2a8921904543b9be7a))

Network accessline 95

* bump supabase skill to v0.1.1 and fix Data API broken link ([#72](https://github.com/supabase/agent-skills/issues/72)) ([5a6542e](https://github.com/supabase/agent-skills/commit/5a6542e08fc026d90c9a6a0f5a67749e9ceb9946))

Network accessline 96

* cover SECURITY DEFINER, auth.role() deprecation, and BOLA in security checklist ([#85](https://github.com/supabase/agent-skills/issues/85)) ([133f43e](https://github.com/supabase/agent-skills/commit/133f43e8c2ffc48823ff0630c692cabecea3e3a

Network accessline 97

* update Data API doc link and bump supabase skill to v0.1.1 ([#73](https://github.com/supabase/agent-skills/issues/73)) ([e5f7a7c](https://github.com/supabase/agent-skills/commit/e5f7a7cfd697765848ffd6a4505f3c02e1ee17ee))

`skills/supabase/SKILL.md`

Network accessline 16

First, fetch `https://supabase.com/changelog.md` (a lightweight summary index — not a heavy pull), scan for `breaking-change` tags relevant to your task, and follow the linked page for any that apply. Then look up the relevant topic using t

Network accessline 24

**4. Exposing tables to the Data API:** Depending on the user's [Data API settings](https://supabase.com/dashboard/project/<ref>/integrations/data_api/settings), newly created tables may not be automatically exposed via the Data (REST) API.

Network accessline 28

When a user reports a SQL-created table is unexpectedly inaccessible, check their Data API settings and whether the roles have been granted access via explicit `GRANT` SQL. When granting public (`anon`/`authenticated`) access, always enable

Network accessline 30

**5. RLS in exposed schemas.** Enable RLS on every table in any exposed schema, which includes `public` by default. This is critical in Supabase because tables in exposed schemas can be reachable through the Data API when the `anon`/`authen

Network accessline 31

Enable RLS on every table in any exposed schema, which includes `public` by default. This is critical in Supabase because tables in exposed schemas can be reachable through the Data API when the `anon`/`authenticated` roles have access (see

Network accessline 41

- **API key and client exposure**   - **Never expose the `service_role` or secret key in public clients.** Prefer publishable keys for frontend code. Legacy `anon` keys are only for compatibility. In Next.js, any `NEXT_PUBLIC_` env var is s

Network accessline 43

- **Use scoped personal access tokens for the Management API, CLI, and MCP server.** A classic personal access token carries the user's full account access, on every organization and project. For scripts, CI, and agents, have the user creat

Network accessline 73

- **Dependency and supply-chain security**   - **Always pin package versions and commit lockfiles** when installing Supabase packages (`supabase-js`, `@supabase/ssr`, `supabase-py`, etc.). See the [npm security guide](https://supabase.com/d

Network accessline 74

- **Always pin package versions and commit lockfiles** when installing Supabase packages (`supabase-js`, `@supabase/ssr`, `supabase-py`, etc.). See the [npm security guide](https://supabase.com/docs/guides/security/npm-security.md) for the

Network accessline 76

For any security concern not covered above, fetch the Supabase product security index: `https://supabase.com/docs/guides/security/product-security.md`

Access to secretsline 92
```
[Credential-related source omitted]
```

Network accessline 95

**Version check and upgrade:** Run `supabase --version` to check. For CLI changelogs and version-specific features, consult the [CLI documentation](https://supabase.com/docs/reference/cli/introduction) or [GitHub releases](https://github.co

Network accessline 99

For setup instructions, server URL, and configuration, see the [MCP setup guide](https://supabase.com/docs/guides/getting-started/mcp).

Network accessline 103

1. **Check if the server is reachable:**    `curl -so /dev/null -w "%{http_code}" https://mcp.supabase.com/mcp`

Network accessline 104

`curl -so /dev/null -w "%{http_code}" https://mcp.supabase.com/mcp`

Network accessline 107

2. **Check `.mcp.json` configuration:**    Verify the project root has a valid `.mcp.json` with the correct server URL. If missing, create one pointing to `https://mcp.supabase.com/mcp`.

Network accessline 108

Verify the project root has a valid `.mcp.json` with the correct server URL. If missing, create one pointing to `https://mcp.supabase.com/mcp`.

Network accessline 114

4. **Check scoped token permissions:**    If a tool fails with "You do not have permission to perform this action" while using a scoped personal access token, the token lacks that tool's permission or the project is outside the token's scop

Network accessline 115

If a tool fails with "You do not have permission to perform this action" while using a scoped personal access token, the token lacks that tool's permission or the project is outside the token's scope. Check the tool's required permission in

Network accessline 131

Use this when `supabase/schemas/` exists or `config.toml` sets `schema_paths`. Edit the desired schema state in those files, then generate and review the migration. Do not start by hand-writing a migration. See the [Declarative database sch

Network accessline 150

When you get an error on a Supabase-related request, for example an error code from the Supabase REST API, Postgres database, or PostgREST, an empty result, getting blocked by RLS unexpectedly, or an error from a Supabase service like Auth,

`skills/supabase/references/skill-feedback.md`

Network accessline 16

https://github.com/supabase/agent-skills/issues/new

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Signal confidence: 199 facts

Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:3Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:3Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:8Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:8Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:9Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:9Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:14Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:14Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:15Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:15Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:16Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:16Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:18Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:18Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:23Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:23Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:24Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:24Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:29Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:29Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:30Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:30Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:31Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:31Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:33Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:33Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:38Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:38Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:39Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:39Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:44Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:44Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:45Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:45Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:47Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:47Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:52Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:52Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:53Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:53Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:58Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:58Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:59Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:59Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:61Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:61Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:66Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:66Low confidence
Network access in prose of documentationskills/supabase-postgres-best-practices/CHANGELOG.md:67Low confidence
Network access in prose of documentationsupabase-postgres-best-practices/CHANGELOG.md:67Low confidence

and 149 more

Works with

Agent compatibility, from the files in this repository
Agent	Status	Evidence	Install to
Claude Code	Native	Manifest .claude-plugin/marketplace.json	`.claude/skills/<skill-name>/`
Codex	Native	Manifest AGENTS.md	`.agents/skills/<skill-name>/`
Cursor	Compatible	Standard SKILL.md skills/supabase/SKILL.md	`.cursor/skills/<skill-name>/`
Gemini CLI	Compatible	Standard SKILL.md skills/supabase/SKILL.md	`.gemini/skills/<skill-name>/`
GitHub Copilot	Compatible	Standard SKILL.md skills/supabase/SKILL.md	`.github/skills/<skill-name>/`
OpenCode	Compatible	Standard SKILL.md skills/supabase/SKILL.md	`.opencode/skills/<skill-name>/`

Native The repository ships a manifest, folder or frontmatter field for this agent.
Compatible A standard SKILL.md that this agent can read.
Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

[![supabase/agent-skills on hotskills](https://hotskills.dev/badge/supabase-agent-skills.svg)](https://hotskills.dev/skill/supabase-agent-skills/)

supabase/agent-skills

History

skills/supabase/SKILL.md

skills/supabase-postgres-best-practices/SKILL.md

Share this page

Heat

Stars over time

Individual skills in this repository

How it works

supabase

Frontmatter

SKILL.md

Reference documents

The playbook

Files

supabase-postgres-best-practices

Frontmatter

SKILL.md

Reference documents

The playbook

Files

Skills included

Repository facts

Rank over the last 12 weeks

Before you install

skills/supabase-postgres-best-practices/CHANGELOG.md

skills/supabase-postgres-best-practices/SKILL.md

skills/supabase-postgres-best-practices/references/_contributing.md

skills/supabase-postgres-best-practices/references/_template.md

skills/supabase-postgres-best-practices/references/advanced-full-text-search.md

skills/supabase-postgres-best-practices/references/advanced-jsonb-indexing.md

skills/supabase-postgres-best-practices/references/conn-idle-timeout.md

skills/supabase-postgres-best-practices/references/conn-limits.md

skills/supabase-postgres-best-practices/references/conn-pooling.md

skills/supabase-postgres-best-practices/references/conn-prepared-statements.md

skills/supabase-postgres-best-practices/references/data-batch-inserts.md

skills/supabase-postgres-best-practices/references/data-n-plus-one.md

skills/supabase-postgres-best-practices/references/data-pagination.md

skills/supabase-postgres-best-practices/references/data-upsert.md

skills/supabase-postgres-best-practices/references/lock-advisory.md

skills/supabase-postgres-best-practices/references/lock-deadlock-prevention.md

skills/supabase-postgres-best-practices/references/lock-short-transactions.md

skills/supabase-postgres-best-practices/references/lock-skip-locked.md

skills/supabase-postgres-best-practices/references/monitor-explain-analyze.md

skills/supabase-postgres-best-practices/references/monitor-pg-stat-statements.md

skills/supabase-postgres-best-practices/references/monitor-vacuum-analyze.md

skills/supabase-postgres-best-practices/references/query-composite-indexes.md

skills/supabase-postgres-best-practices/references/query-covering-indexes.md

skills/supabase-postgres-best-practices/references/query-index-types.md

skills/supabase-postgres-best-practices/references/query-missing-indexes.md

skills/supabase-postgres-best-practices/references/query-partial-indexes.md

skills/supabase-postgres-best-practices/references/schema-constraints.md

skills/supabase-postgres-best-practices/references/schema-data-types.md

skills/supabase-postgres-best-practices/references/schema-foreign-key-indexes.md

skills/supabase-postgres-best-practices/references/schema-lowercase-identifiers.md

skills/supabase-postgres-best-practices/references/schema-partitioning.md

skills/supabase-postgres-best-practices/references/schema-primary-keys.md

skills/supabase-postgres-best-practices/references/security-privileges.md

skills/supabase-postgres-best-practices/references/security-rls-basics.md

skills/supabase-postgres-best-practices/references/security-rls-performance.md

skills/supabase/CHANGELOG.md

skills/supabase/SKILL.md

skills/supabase/references/skill-feedback.md

How the signals fit together

Works with

You might also use

KKKKhazix/khazix-skills

binance/binance-skills-hub

swarmclawai/swarmclaw

anthropics/skills

openai/skills

muratcankoylan/Agent-Skills-for-Context-Engineering

Explore alternatives and comparisons

Add this badge to your README

`skills/supabase/SKILL.md`

`skills/supabase-postgres-best-practices/SKILL.md`

`skills/supabase-postgres-best-practices/CHANGELOG.md`

`skills/supabase-postgres-best-practices/SKILL.md`

`skills/supabase-postgres-best-practices/references/_contributing.md`

`skills/supabase-postgres-best-practices/references/_template.md`

`skills/supabase-postgres-best-practices/references/advanced-full-text-search.md`

`skills/supabase-postgres-best-practices/references/advanced-jsonb-indexing.md`

`skills/supabase-postgres-best-practices/references/conn-idle-timeout.md`

`skills/supabase-postgres-best-practices/references/conn-limits.md`

`skills/supabase-postgres-best-practices/references/conn-pooling.md`

`skills/supabase-postgres-best-practices/references/conn-prepared-statements.md`

`skills/supabase-postgres-best-practices/references/data-batch-inserts.md`

`skills/supabase-postgres-best-practices/references/data-n-plus-one.md`

`skills/supabase-postgres-best-practices/references/data-pagination.md`

`skills/supabase-postgres-best-practices/references/data-upsert.md`

`skills/supabase-postgres-best-practices/references/lock-advisory.md`

`skills/supabase-postgres-best-practices/references/lock-deadlock-prevention.md`

`skills/supabase-postgres-best-practices/references/lock-short-transactions.md`

`skills/supabase-postgres-best-practices/references/lock-skip-locked.md`

`skills/supabase-postgres-best-practices/references/monitor-explain-analyze.md`

`skills/supabase-postgres-best-practices/references/monitor-pg-stat-statements.md`

`skills/supabase-postgres-best-practices/references/monitor-vacuum-analyze.md`

`skills/supabase-postgres-best-practices/references/query-composite-indexes.md`

`skills/supabase-postgres-best-practices/references/query-covering-indexes.md`

`skills/supabase-postgres-best-practices/references/query-index-types.md`

`skills/supabase-postgres-best-practices/references/query-missing-indexes.md`

`skills/supabase-postgres-best-practices/references/query-partial-indexes.md`

`skills/supabase-postgres-best-practices/references/schema-constraints.md`

`skills/supabase-postgres-best-practices/references/schema-data-types.md`

`skills/supabase-postgres-best-practices/references/schema-foreign-key-indexes.md`

`skills/supabase-postgres-best-practices/references/schema-lowercase-identifiers.md`

`skills/supabase-postgres-best-practices/references/schema-partitioning.md`

`skills/supabase-postgres-best-practices/references/schema-primary-keys.md`

`skills/supabase-postgres-best-practices/references/security-privileges.md`

`skills/supabase-postgres-best-practices/references/security-rls-basics.md`

`skills/supabase-postgres-best-practices/references/security-rls-performance.md`

`skills/supabase/CHANGELOG.md`

`skills/supabase/SKILL.md`

`skills/supabase/references/skill-feedback.md`