Build Secure Supabase Server Endpoints
Server-side Supabase authentication and client setup can be easy to misconfigure. This skill provides current patterns for secure handlers, webhooks, adapters, and migrations.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "supabase-server" from https://skillstore.io/skills/supabase-supabase-server.md and its manifest at https://skillstore.io/api/skills/supabase-supabase-server/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "supabase-server". Create a user-authenticated function that returns the current user todo list.
Expected outcome:
A Deno Edge Function design using user authentication, a context-scoped client, structured errors, and the required npm import format.
Using "supabase-server". Accept Stripe checkout webhooks and mark matching orders as paid.
Expected outcome:
Using "supabase-server". Update an older function that uses service-role and anonymous keys.
Expected outcome:
A migration plan mapping legacy key usage to explicit authentication modes while preserving caller verification and administrative database access.
All 120 static alerts are false positives caused by Markdown formatting, documentation links, placeholder credentials, or legitimate server examples. SKILL.md contains no executable audit-time scripts, dynamic code construction, shell substitution, secret exfiltration, or prompt injection. Documented network and environment access is scoped to user-authored Supabase and Stripe integrations.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/supabase-supabase-server/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/supabase-supabase-server?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supabase-supabase-server/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/supabase-supabase-server.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>supabase. (2026). supabase-server security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/supabase-supabase-server/audits/1@techreport{supabase-supabase-supabase-server-2026,
author = {supabase},
title = {supabase-server security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/supabase-supabase-server/audits/1},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "supabase-server security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "supabase"
date-released: "2026-08-21"
url: "https://skillstore.io/skills/supabase-supabase-server/audits/1"
identifiers:
- type: other
value: "skillstore:supabase-supabase-server:audit:1"
description: "Skillstore immutable audit report identifier"
Build authenticated Supabase Edge Functions with the correct runtime imports, clients, and platform configuration.
Integrate per-route Supabase authentication into Hono, Cloudflare Workers, or cookie-based server frameworks.
Replace legacy keys, CDN imports, manual clients, and deprecated authentication options with current server patterns.
Create a Supabase Edge Function that lists todos for an authenticated user. Use @supabase/server, user authentication, and clear error handling.
Add @supabase/server authentication to this Hono application. Protect [route] for signed-in users and preserve the existing response behavior.
Design a Supabase Edge Function for [provider] webhooks. Verify the provider signature before database updates and explain required secret configuration.
Migrate this legacy Supabase server code to @supabase/server: [code]. Preserve authorization intent, update keys and imports, and identify configuration changes.
Author
supabaseLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
e152e69d5b5fda6735649f4334cb64b82e1ba84e
Maintenance freshness
8/21/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
Build Supabase Apps Safely
Supabase projects change quickly, and outdated guidance can create database or auth defects. This skill directs Claude, Codex, and Claude Code to verify docs, use safe workflows, and check Supabase security concerns.
Optimize Supabase Postgres Performance
Slow queries and schema drift can make Postgres apps hard to scale. This skill gives AI agents Supabase-backed rules for indexes, RLS, pooling, and diagnostics.
Build Supabase Backends with Guardrails
by DojoCodingLabs
Backend teams need repeatable patterns for secure Supabase services. This skill provides practical guidance for Edge Functions, PostgreSQL, RLS, validation, testing, and deployment.
Explore the Empathy Ledger Codebase
by Acurioustractor
Complex repository structure makes features and data flows difficult to trace. This skill maps Empathy Ledger files, services, routes, schemas, and dependencies.
Build Secure Payment Integrations
by sickn33
Payment features fail when checkout, subscriptions, and webhooks are built without clear security controls. This skill guides secure processor integrations with practical validation, retry, and compliance checks.
Add Catalyst-Relay HTTP Endpoints
by Artisan-Edge
New endpoints can become inconsistent with Catalyst-Relay conventions. This skill guides route creation, validation, registration, response formatting, client mapping, and documentation.
Build Production-Ready Construction Software
by ALPA-Const
Incomplete code and unclear instructions make construction software changes difficult to implement safely. This skill requests complete solutions with error handling and exact steps.
Build Empathy Ledger Features Safely
by Acurioustractor
Empathy Ledger contributors need fast context for sensitive platform work. This skill gives concise project patterns for tenancy, cultural safety, services, and workflows.