supabase: a Claude Code skill by Supabase
Official
For developers building on Supabase who want auth, RLS and migrations handled with care. Skip it if your backend runs on plain Postgres or another platform.
- Score
- 88of 100
- Rank
- #15of 239
- Installs
- 363Kon skills.sh
- Security
- Mixed 4 scanners
- Updated
- 2026
- Context
- ~199tokens always
Install
npx skills add https://github.com/supabase/agent-skills --skill supabase Run it in your terminal. View the source
Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app
Supabase is also a Claude connector. See that page
supabase is also a Claude Code plugin. See that page
What does supabase do?
supabase is a Claude skill that guides any task on a Supabase project, from Auth and Edge Functions to Storage, Realtime and schema changes. It tells Claude to check the Supabase changelog and current docs before writing code, to verify each fix with a test query and stop after two or three failed attempts. A security checklist covers traps such as user_metadata in RLS policies, views that bypass RLS, SECURITY DEFINER functions and service_role keys in the browser. For schema work it separates declarative schemas from imperative migrations, then runs supabase db advisors and supabase db pull to produce the migration file.
When should you use supabase?
Use it when
- An RLS policy hides rows you expected to see
- You are adding a table and its migration
- The Supabase MCP server tools do not show up
Skip it when
- Your project does not use Supabase
- You only need generic SQL help
What it needs and what it can touch
You need
- A Supabase project
- The Supabase CLI (v2.81.3 or later for advisors)
What it can do
- Runs shell commands (Supabase CLI, curl)
- Runs SQL on your database
- Fetches Supabase docs and changelog from the web
- Reads and edits project files
From reading its instructions, not from running it.
Why it scores 88
Strongest on upkeep (100 of 100), weakest on adoption (74).
Is supabase safe to install?
At least one scanner raised a medium warning. Read the results below. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.
| Scanner | Result | Date |
|---|---|---|
| Gen Agent Trust Hub | Passed | Oct 2, 2026 |
| Socket | Passed | Oct 2, 2026 |
| Snyk | Medium risk | Oct 2, 2026 |
| ZeroLeaks | Medium risk | Apr 15, 2026 |
Details
- Installs
- 363,049
- Repository stars
- 3,040
- Last repository change
- Tokens always loaded
- about 199
- Tokens when used
- about 3,348
- License
- MIT
- Data confidence
- High
Did it do the job for you?
Alternatives to supabase
All skills for this job-
Get neonneon
For developers putting an app's database, login, files or functions on Neon who want Claude to drive the neon CLI.
-
Get supabase-postgres-best-practicessupabase-postgres-best-practices
For developers writing SQL, schemas or row level security policies on any Postgres database.
-
Get insforge-debuginsforge-debug
For developers on InsForge chasing an error, a slow endpoint or a pre-launch audit.
-
Get convexconvex
For developers building on Convex or wanting a TypeScript backend with a realtime database.