Supabase Agent Skills
Agent Skills to help developers using AI agents with Supabase, for more accurate and efficient development.
Evidence shows installation scripts and release workflows, but no specific implementation or documentation for least privilege, user confirmation, data flow transparency, sensitive data handling, dependency security, external effects, rollback, or source attribution. Therefore all trust criteria score 0.
Self-consistency: README, package.json, and tests are consistent on skill names and installation, score 2. Dependency availability: dependencies are listed in package.json but no lockfile or integrity checks, score 2. Failure messages: tests capture error output but no user-facing failure message design, score 1.
Audience and scenarios: README describes target audience and use cases, score 2. Capability boundaries: skill descriptions specify when to use, score 2. Trigger precision: skill descriptions provide usage conditions, score 2. Environment fit: supports multiple agents and installation methods, score 2.
Information architecture: README organizes skill list and structure clearly, score 2. Install notes: provides multiple installation methods, score 2. Naming stability: skill names are fixed, score 2. Examples and FAQ: provides examples but no FAQ, score 2. Known limitations: not explicitly listed, score 1. License: MIT license, score 2. Versioning and changelog: has version number but no changelog, score 2. Maintenance responsibility: has release workflow, score 2.
Output usability: skills provide instructions and references, score 2. Marginal value: provides official best practices, score 2. Cost-benefit: easy installation, score 2.
Claim traceability: claims in README lack sources, score 1. Cross-source corroboration: no independent sources, score 1. Fact-inference separation: not clearly distinguished, score 1.
- No security mechanisms such as least privilege, user confirmation, or data flow transparency are provided; installation scripts may execute arbitrary code.
- Dependencies are not locked, posing supply chain risks.
- Release workflow uses GitHub App tokens without specifying permission scopes.
What does this agent do, and when should you use it?
Supabase Agent Skills is a repository of skill packages containing instructions, scripts, and resources for developers using AI agents with Supabase. The skills follow the Agent Skills open standard and are compatible with over 18 AI agents including Claude Code, GitHub Copilot, Cursor, and Cline. Two skills are currently available: 'supabase' (comprehensive coverage of all Supabase products and integrations) and 'supabase-postgres-best-practices' (Postgres performance optimization guidelines spanning 8 categories). Installation is straightforward via npx commands or as Claude Code plugins. The repository's release process includes a .well-known discovery mechanism to serve skills on supabase.com.
The repository provides skill folders that AI agents can discover and use, with each skill containing a SKILL.md manifest and optional references/ files. The 'supabase' skill covers all Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues), client libraries and SSR integrations, troubleshooting auth issues, and using the Supabase CLI or MCP server. The 'supabase-postgres-best-practices' skill provides Postgres performance optimization guidelines prioritized by impact, covering categories like query performance, connection management, schema design, concurrency & locking, security & RLS, data access patterns, monitoring & diagnostics, and advanced features. Users install skills via npx skills add or as Claude plugins. Once installed, AI agents automatically use the skills when relevant tasks are detected, such as optimizing queries or reviewing schema.
- A developer integrating Supabase Auth with Next.js needs guidance on handling sessions and cookies; the supabase skill provides step-by-step instructions.
- A database administrator wants to improve slow Postgres queries; the postgres-best-practices skill offers prioritized optimization strategies.
- A Claude Code user prefers installing skills as plugins to get automatic Supabase assistance during coding.
- A team wants to audit their database schema for security issues; the skill's RLS and security category provides a checklist.
- A developer using the Supabase CLI for migrations can leverage the skill to avoid common pitfalls.
What are this agent's strengths and limitations?
- Comprehensive coverage of Supabase's full product ecosystem, from database to auth and storage.
- Postgres best practices are categorized by impact, helping users focus on critical issues first.
- Supports 18+ AI agents, with flexible installation via npx or Claude plugins.
- Content is tailored to Supabase-specific workflows; may not be directly applicable to other databases or frameworks.
- Requires Node.js and npx for installation, which could be a barrier for non-Node developers.
- Advanced features like Postgres extensions may require deeper Supabase knowledge to fully utilize.
How do you install or deploy this agent?
Run npx skills add supabase/agent-skills to install all skills, or npx skills add supabase/agent-skills --skill supabase to install a specific skill. Alternatively, for Claude Code, run claude plugin marketplace add supabase/agent-skills then claude plugin install supabase@supabase-agent-skills.
How do you use this agent?
After installation, AI agents will automatically use the skills when relevant tasks are detected. For example, you can ask your agent to 'Optimize this Postgres query' or 'Review my schema for performance issues', and the agent will load the skill's guidance to assist you.