Build Secure Supabase Backends
Supabase projects can expose data when RLS, storage, and realtime rules are incomplete. This skill provides reusable security patterns, migrations, client examples, and review checklists.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "supabase-patterns" from https://skillstore.io/skills/consiliency-supabase-patterns.md and its manifest at https://skillstore.io/api/skills/consiliency-supabase-patterns/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "supabase-patterns". Design owner-only access for a posts table.
Expected outcome:
Using "supabase-patterns". Review a team policy that checks membership but ignores administrator roles.
Expected outcome:
The review separates member read access from administrator update access, recommends explicit role checks, and lists cross-team denial tests.
Using "supabase-patterns". Prepare a production checklist for a realtime table.
Expected outcome:
All 44 static findings are false positives caused by SQL identifiers, Markdown code fences, template literals, or public Supabase client configuration. However, two cookbook examples define privileged functions without a fixed search path, creating a conditional privilege-escalation risk.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/consiliency-supabase-patterns/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/consiliency-supabase-patterns?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/consiliency-supabase-patterns?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/consiliency-supabase-patterns/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/consiliency-supabase-patterns.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Consiliency. (2026). supabase-patterns security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/consiliency-supabase-patterns/audits/9@techreport{consiliency-consiliency-supabase-patterns-2026,
author = {Consiliency},
title = {supabase-patterns security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/consiliency-supabase-patterns/audits/9},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "supabase-patterns security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "Consiliency"
date-released: "2026-07-13"
url: "https://skillstore.io/skills/consiliency-supabase-patterns/audits/9"
identifiers:
- type: other
value: "skillstore:consiliency-supabase-patterns:audit:9"
description: "Skillstore immutable audit report identifier"
Create ownership or team-based RLS policies for a new Supabase feature.
Compare existing policies against common mistakes and production security checks.
Establish repeatable migration, type-generation, and policy-testing conventions across services.
Create Supabase RLS policies for a posts table. Users may select, insert, update, and delete only rows matching their authenticated user ID.
Design RLS for posts and team_members. Members may read team posts, while team administrators may update them. Include assumptions and policy tests.
Review these Supabase tables and policies for missing RLS, unsafe USING clauses, missing WITH CHECK clauses, and excessive realtime exposure: [paste schema and policies].
Produce a migration plan for this Supabase schema change: [describe change]. Cover RLS, storage, realtime, rollback, role tests, and generated client types.
Author
ConsiliencyLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Repository
https://github.com/Consiliency/treesitter-chunker/tree/main/.ai-dev-kit/skills/supabase-patternsRef
635f69fb8d2f4e6330ba47a4e5a0fb239c04d110
Maintenance freshness
7/18/2026
Usage
5 downloads · 293 views
File structure
Create Clear C4 Architecture Diagrams
Architecture discussions become confusing when diagrams mix detail levels or omit relationships. This skill creates structured C4 views and reviews them against consistent guidelines.
Retrieve Local Documentation Efficiently
Finding relevant local documentation can waste time and context. This skill guides targeted retrieval, source consolidation, and web fallback when local coverage is insufficient.
Research Topics Across Web, Docs, and Code
Research questions often require current web evidence, local documentation, and code examples. This skill coordinates those sources and synthesizes findings with clear confidence labels.
Encode Structured Data in TOON
JSON can consume excessive prompt tokens when records repeat the same keys. This skill converts suitable structures into compact TOON and validates format rules.
Build Project Testing Patterns
Teams often write inconsistent tests that are hard to maintain. This skill gives Claude, Codex, and Claude Code a shared testing structure for fixtures, mocks, coverage, and CI scope.
Research Projects With Verified Sources
Research tasks often lose scope, citations, and source quality. This skill gives Claude, Codex, and Claude Code a repeatable research workflow.
Validate Cross-Language Type Consistency
by BarisSozen
Cross-language type drift can cause precision loss and contract bugs. This skill guides Claude, Codex, and Claude Code through Rust, TypeScript, and PostgreSQL checks.
Explore the Empathy Ledger Codebase
by Acurioustractor
Complex repository structure makes features and data flows difficult to trace. This skill maps Empathy Ledger files, services, routes, schemas, and dependencies.
Design Event Stores for Event-Sourced Systems
by wshobson
Event-sourced systems need durable ordering, concurrency checks, subscriptions, and clear storage choices. This skill guides schema design, implementation patterns, and technology selection for event stores.
Build Drizzle PostgreSQL Patterns
by Barnhardt-Enterprises-Inc
Teams need consistent Drizzle ORM patterns for PostgreSQL projects. This skill provides schema, relation, query, mutation, transaction, and migration examples.
Build Type-Safe Drizzle ORM Apps
by Barnhardt-Enterprises-Inc
Database code often loses type safety when projects add migrations, relations, and raw SQL. This skill gives Claude and Codex practical Drizzle ORM patterns for PostgreSQL and edge deployments.
Build Production-Ready Construction Software
by ALPA-Const
Incomplete code and unclear instructions make construction software changes difficult to implement safely. This skill requests complete solutions with error handling and exact steps.