supabase-server
Build Secure Supabase Server Endpoints
Server-side Supabase authentication and client setup can be easy to misconfigure. This skill provides current patterns for secure handlers, webhooks, adapters, and migrations.
Установить с помощью моего Агента
Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.
Review the Skillstore skill "supabase-server" from https://skillstore.io/skills/supabase-supabase-server.md and its manifest at https://skillstore.io/api/skills/supabase-supabase-server/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.
Ресурсы для AI-агентов
Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.
Протестировать
Использование «supabase-server». Create a user-authenticated function that returns the current user todo list.
Ожидаемый результат:
A Deno Edge Function design using user authentication, a context-scoped client, structured errors, and the required npm import format.
Использование «supabase-server». Accept Stripe checkout webhooks and mark matching orders as paid.
Ожидаемый результат:
- A public handler that verifies the Stripe signature before processing events.
- Secret configuration guidance for Stripe credentials and webhook verification.
- A scoped database update using the administrative Supabase client.
Использование «supabase-server». Update an older function that uses service-role and anonymous keys.
Ожидаемый результат:
A migration plan mapping legacy key usage to explicit authentication modes while preserving caller verification and administrative database access.
Аудит безопасности
БезопасноAll 120 static alerts are false positives caused by Markdown formatting, documentation links, placeholder credentials, or legitimate server examples. SKILL.md contains no executable audit-time scripts, dynamic code construction, shell substitution, secret exfiltration, or prompt injection. Documented network and environment access is scoped to user-authored Supabase and Stripe integrations.
Факторы риска
⚡ Содержит скрипты (1)
⚙️ Внешние команды (50)
🌐 Доступ к сети (7)
🔑 Переменные окружения (5)
Поделиться и цитировать этот отчет
Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.
Копировать ссылку на отчёт
https://skillstore.io/skills/supabase-supabase-server/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportЗначок Markdown
[](https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge)Значок HTML
<a href="https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supabase-supabase-server/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Встраиваемая карточка
<iframe src="https://skillstore.io/embed/skills/supabase-supabase-server.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Академические ссылки (APA · BibTeX · CFF)
Цитата APA
supabase. (2026). supabase-server security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/supabase-supabase-server/audits/1Цитата BibTeX
@techreport{supabase-supabase-supabase-server-2026,
author = {supabase},
title = {supabase-server security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/supabase-supabase-server/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "supabase-server security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "supabase"
date-released: "2026-08-21"
url: "https://skillstore.io/skills/supabase-supabase-server/audits/1"
identifiers:
- type: other
value: "skillstore:supabase-supabase-server:audit:1"
description: "Skillstore immutable audit report identifier"
Оценка Skillstore
Почему такая оценка Достоверность доказательств: СреднийЧто вы можете построить
Create Edge Functions
Build authenticated Supabase Edge Functions with the correct runtime imports, clients, and platform configuration.
Add Framework Authentication
Integrate per-route Supabase authentication into Hono, Cloudflare Workers, or cookie-based server frameworks.
Modernize Existing Functions
Replace legacy keys, CDN imports, manual clients, and deprecated authentication options with current server patterns.
Попробуйте эти промпты
Create a Supabase Edge Function that lists todos for an authenticated user. Use @supabase/server, user authentication, and clear error handling.
Add @supabase/server authentication to this Hono application. Protect [route] for signed-in users and preserve the existing response behavior.
Design a Supabase Edge Function for [provider] webhooks. Verify the provider signature before database updates and explain required secret configuration.
Migrate this legacy Supabase server code to @supabase/server: [code]. Preserve authorization intent, update keys and imports, and identify configuration changes.
Лучшие практики
- Confirm endpoint access requirements before choosing an authentication mode.
- Keep secrets in platform secret storage and use named keys for isolated services.
- Verify external webhook signatures before parsing events or changing database records.
Избегать
- Do not use unauthenticated mode for sensitive reads, writes, or administrative actions.
- Do not embed real API keys in source files, prompts, logs, or example requests.
- Do not copy legacy auth names or environment keys into new implementations.
Часто задаваемые вопросы
Which runtimes does this skill cover?
Does it choose the authentication mode automatically?
Can it handle Stripe webhooks?
Does it support server-to-server calls?
Can it migrate legacy Edge Functions?
Does it configure production secrets?
Сведения для разработчиков
Автор
supabaseЛицензия
MIT
Ревизия Skillstore
r1
Примечание о версии
Автор не указал версию.
Репозиторий
https://github.com/supabase/server/tree/39085907d163a434f18132639f92ab4b5082b5ab/skills/supabase-serverСсылка
e152e69d5b5fda6735649f4334cb64b82e1ba84e
Актуальность поддержки
21.08.2026
Использование
0 загрузок · 0 просмотров
Структура файлов
📄 SKILL.md