supabase-best-practices
💡 Summary
A skill providing comprehensive security and performance guidelines for Supabase with Clerk authentication integration.
🎯 Target Audience
🤖 AI Roast: “Powerful, but the setup might scare off the impatient.”
Risk: Medium. Review: shell/CLI command execution; outbound network access (SSRF, data egress). Run with least privilege and audit before enabling in production.
Supabase Best Practices
A comprehensive skill for AI coding agents providing Supabase security and performance guidelines with Clerk authentication integration.
Installation
npx add-skill pedrobarretocw/supabase-best-practices
Installation Options
# Global installation (available in all projects) npx add-skill pedrobarretocw/supabase-best-practices --global # Project-specific installation npx add-skill pedrobarretocw/supabase-best-practices
What's Included
- 40+ Rules across 10 categories
- RLS Best Practices with performance benchmarks (up to 99.99% improvement)
- Clerk Integration following official recommendations (as of 2025)
- Security Patterns for production applications
- Comprehensive Guidelines document with all rules expanded
Categories
| Priority | Category | Impact | Rules | |----------|----------|--------|-------| | 1 | Row Level Security | CRITICAL | 8 | | 2 | Clerk Integration | CRITICAL | 7 | | 3 | Database Security | HIGH | 6 | | 4 | Authentication Patterns | HIGH | 4 | | 5 | API Security | HIGH | 3 | | 6 | Storage Security | MEDIUM-HIGH | 3 | | 7 | Realtime Security | MEDIUM | 3 | | 8 | Edge Functions | MEDIUM | 3 | | 9 | Testing | MEDIUM | 3 | | 10 | Security | MEDIUM | 2 |
Supported Platforms
| Platform | Support | |----------|---------| | Claude Code | Full | | OpenCode | Full | | Cursor | Full | | GitHub Copilot | Full | | Roo Code | Full |
Quick Start
After installation, the skill provides guidelines for:
- Setting up a new Supabase project
- Integrating Clerk authentication
- Writing Row Level Security policies
- Designing database schemas
- Implementing real-time features
- Reviewing code for security issues
Key RLS Performance Benchmarks
Based on Supabase RLS Performance Tests:
| Optimization | Improvement | |-------------|-------------| | Add indexes | 99.94% | | Wrap with SELECT | 94.97% | | Security definer | 99.993% | | Fix joins | 99.78% | | Specify TO role | 99.78% |
File Structure
supabase-best-practices/
├── SKILL.md # Main skill file
├── README.md # This file
├── LICENSE # MIT License
└── references/
├── supabase-guidelines.md # Complete guide
└── rules/
├── rls-*.md # RLS rules
├── clerk-*.md # Clerk integration rules
├── db-*.md # Database security rules
├── auth-*.md # Authentication rules
├── api-*.md # API security rules
├── storage-*.md # Storage rules
├── realtime-*.md # Realtime rules
├── edge-*.md # Edge Functions rules
├── test-*.md # Testing rules
└── security-*.md # Security rules
References
- Supabase RLS Guide
- Supabase + Clerk Integration
- Clerk Supabase Integration
- RLS Performance Discussion
License
MIT
Pros
- Comprehensive guidelines across multiple categories.
- Integration with Clerk for enhanced security.
- Performance benchmarks for Row Level Security.
- Supports multiple coding platforms.
Cons
- May require familiarity with Supabase.
- Complexity may overwhelm beginners.
- Limited to Supabase and Clerk integration.
- Performance benchmarks may vary by use case.
Related Skills
pytorch
S“It's the Swiss Army knife of deep learning, but good luck figuring out which of the 47 installation methods is the one that won't break your system.”
agno
S“It promises to be the Kubernetes for agents, but let's see if developers have the patience to learn yet another orchestration layer.”
nuxt-skills
S“It's essentially a well-organized cheat sheet that turns your AI assistant into a Nuxt framework parrot.”
Disclaimer: This content is sourced from GitHub open source projects for display and rating purposes only.
Copyright belongs to the original author pedrobarretocw.