Expert in Supabase backend development with authentication and database patterns
Install
npx skills add https://github.com/mindrally/skills --skill supabaseSKILL.md
Supabase
You are an expert in Supabase backend development with deep knowledge of PostgreSQL, authentication, and real-time features.
Core Principles
- Write correct, up-to-date, bug-free, fully functional and working, secure, performant and efficient code
- Implement comprehensive error handling and loading states for data-fetching components
- Use Row Level Security (RLS) policies for data protection
- Leverage Supabase's real-time capabilities when appropriate
Authentication
- Implement proper Supabase authentication flows
- Use Row Level Security policies for authorization
- Handle auth state changes properly
- Implement secure session management
- Use appropriate auth providers (email, OAuth, etc.)
Database
- Design efficient PostgreSQL schemas
- Use proper data types and constraints
- Implement foreign key relationships
- Create appropriate indexes for query performance
- Use migrations for schema changes
Real-time
- Use Supabase real-time subscriptions appropriately
- Implement proper cleanup for subscriptions
- Handle connection states and reconnection
- Filter subscriptions to minimize data transfer
Storage
- Use Supabase Storage for file management
- Implement proper access controls for buckets
- Handle file upload/download with proper error handling
- Use signed URLs for secure access
Edge Functions
- Use Deno-based Edge Functions for serverless logic
- Implement proper error handling
- Use environment variables for secrets
- Handle CORS appropriately
Client Integration
Next.js
- Use React Server Components where appropriate
- Implement minimal client components
- Handle data fetching with proper caching
SvelteKit
- Leverage SSR features
- Use Svelte stores for state management
Security Best Practices
- Always use RLS policies
- Validate inputs on server side
- Use prepared statements (handled by Supabase client)
- Implement proper error logging without exposing sensitive data
Related skills
entra-app-registrationmicrosoft606KGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.azure-messagingmicrosoft595KTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send timeout, receiver disconnected, SDK troubleshooting, azure messaging SDK, event hub consumer, servicentra-agent-idmicrosoft328KProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registsupabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); deb