supabase-server
Build Secure Supabase Server Endpoints
Server-side Supabase authentication and client setup can be easy to misconfigure. This skill provides current patterns for secure handlers, webhooks, adapters, and migrations.
Mit meinem Agent installieren
Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.
Review the Skillstore skill "supabase-server" from https://skillstore.io/skills/supabase-supabase-server.md and its manifest at https://skillstore.io/api/skills/supabase-supabase-server/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.
Agent-lesbare Ressourcen
Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.
Testen
„supabase-server“ wird verwendet. Create a user-authenticated function that returns the current user todo list.
Erwartetes Ergebnis:
A Deno Edge Function design using user authentication, a context-scoped client, structured errors, and the required npm import format.
„supabase-server“ wird verwendet. Accept Stripe checkout webhooks and mark matching orders as paid.
Erwartetes Ergebnis:
- A public handler that verifies the Stripe signature before processing events.
- Secret configuration guidance for Stripe credentials and webhook verification.
- A scoped database update using the administrative Supabase client.
„supabase-server“ wird verwendet. Update an older function that uses service-role and anonymous keys.
Erwartetes Ergebnis:
A migration plan mapping legacy key usage to explicit authentication modes while preserving caller verification and administrative database access.
Sicherheitsaudit
SicherAll 120 static alerts are false positives caused by Markdown formatting, documentation links, placeholder credentials, or legitimate server examples. SKILL.md contains no executable audit-time scripts, dynamic code construction, shell substitution, secret exfiltration, or prompt injection. Documented network and environment access is scoped to user-authored Supabase and Stripe integrations.
Risikofaktoren
⚡ Enthält Skripte (1)
⚙️ Externe Befehle (50)
🌐 Netzwerkzugriff (7)
🔑 Umgebungsvariablen (5)
Diesen Bericht teilen & zitieren
Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.
Berichtslink kopieren
https://skillstore.io/skills/supabase-supabase-server/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown-Badge
[](https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge)HTML-Badge
<a href="https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supabase-supabase-server/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Einbettungskarte
<iframe src="https://skillstore.io/embed/skills/supabase-supabase-server.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Wissenschaftliche Zitate (APA · BibTeX · CFF)
APA-Zitat
supabase. (2026). supabase-server security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/supabase-supabase-server/audits/1BibTeX-Zitat
@techreport{supabase-supabase-supabase-server-2026,
author = {supabase},
title = {supabase-server security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/supabase-supabase-server/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "supabase-server security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "supabase"
date-released: "2026-08-21"
url: "https://skillstore.io/skills/supabase-supabase-server/audits/1"
identifiers:
- type: other
value: "skillstore:supabase-supabase-server:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore-Score
Warum dieser Score Evidenzvertrauen: MittelWas Sie erstellen können
Create Edge Functions
Build authenticated Supabase Edge Functions with the correct runtime imports, clients, and platform configuration.
Add Framework Authentication
Integrate per-route Supabase authentication into Hono, Cloudflare Workers, or cookie-based server frameworks.
Modernize Existing Functions
Replace legacy keys, CDN imports, manual clients, and deprecated authentication options with current server patterns.
Diese Prompts ausprobieren
Create a Supabase Edge Function that lists todos for an authenticated user. Use @supabase/server, user authentication, and clear error handling.
Add @supabase/server authentication to this Hono application. Protect [route] for signed-in users and preserve the existing response behavior.
Design a Supabase Edge Function for [provider] webhooks. Verify the provider signature before database updates and explain required secret configuration.
Migrate this legacy Supabase server code to @supabase/server: [code]. Preserve authorization intent, update keys and imports, and identify configuration changes.
Bewährte Praktiken
- Confirm endpoint access requirements before choosing an authentication mode.
- Keep secrets in platform secret storage and use named keys for isolated services.
- Verify external webhook signatures before parsing events or changing database records.
Vermeiden
- Do not use unauthenticated mode for sensitive reads, writes, or administrative actions.
- Do not embed real API keys in source files, prompts, logs, or example requests.
- Do not copy legacy auth names or environment keys into new implementations.