[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71GS28KR7SPFSTSRSBK8A5R":3,"skill-same:01M71GS28KR7SPFSTSRSBK8A5R":57},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":31,"linkOnly":32,"markdownContent":33,"markdownBody":34,"frontMatter":35,"refName":36,"commitSha":37,"skillDirectory":38,"forksCount":39,"repositoryHtmlUrl":40,"repositoryHomepageUrl":6,"ownerHtmlUrl":41,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":42,"install":43,"resources":56},"01M71GS28KR7SPFSTSRSBK8A5R","supabase",null,"Core Supabase CLI, migrations, RLS, Edge Functions","JSGforever\u002Fskillguard","JSGforever","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F85541948?v=4","01M71FQD3E132VMR5F4TAYX3YS","01M71FQD4DYW0XJ4XQ4YQH75Y9",2,"GPL-3.0","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__alinaqi--supabase\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[5,23,24,25,26,27,28,29,30],"cli","core","edge","edge functions","functions","migrations","rls","supabase cli","2026-11-10 10:12:30",false,"---\nname: supabase\ndescription: Core Supabase CLI, migrations, RLS, Edge Functions\n---\n\n# Supabase Core Skill\n\n*Load with: base.md + [supabase-nextjs.md | supabase-python.md | supabase-node.md]*\n\nCore concepts, CLI workflow, and patterns common to all Supabase projects.\n\n**Sources:** [Supabase Docs](https:\u002F\u002Fsupabase.com\u002Fdocs) | [Supabase CLI](https:\u002F\u002Fsupabase.com\u002Fdocs\u002Fguides\u002Flocal-development\u002Fcli\u002Fgetting-started)\n\n---\n\n## Core Principle\n\n**Local-first, migrations in version control, never touch production directly.**\n\nDevelop locally with the Supabase CLI, capture all changes as migrations, and deploy through CI\u002FCD.\n\n---\n\n## Supabase Stack\n\n| Service | Purpose |\n|---------|---------|\n| **Database** | PostgreSQL with extensions |\n| **Auth** | User authentication, OAuth providers |\n| **Storage** | File storage with RLS |\n| **Edge Functions** | Serverless Deno functions |\n| **Realtime** | WebSocket subscriptions |\n| **Vector** | AI embeddings (pgvector) |\n\n---\n\n## CLI Setup\n\n### Install & Login\n```bash\n# macOS\nbrew install supabase\u002Ftap\u002Fsupabase\n\n# npm (alternative)\nnpm install -g supabase\n\n# Login\nsupabase login\n```\n\n### Initialize Project\n```bash\n# In your project directory\nsupabase init\n\n# Creates:\n# supabase\u002F\n# ├── config.toml      # Local config\n# ├── seed.sql         # Seed data\n# └── migrations\u002F      # SQL migrations\n```\n\n### Link to Remote\n```bash\n# Get project ref from dashboard URL: https:\u002F\u002Fsupabase.com\u002Fdashboard\u002Fproject\u002F\u003Cref>\nsupabase link --project-ref \u003Cproject-id>\n\n# Pull existing schema\nsupabase db pull\n```\n\n### Start Local Stack\n```bash\nsupabase start\n\n# Output:\n# API URL: http:\u002F\u002Flocalhost:54321\n# GraphQL URL: http:\u002F\u002Flocalhost:54321\u002Fgraphql\u002Fv1\n# DB URL: postgresql:\u002F\u002Fpostgres:postgres@localhost:54322\u002Fpostgres\n# Studio URL: http:\u002F\u002Flocalhost:54323\n# Anon key: eyJ...\n# Service role key: eyJ...\n```\n\n---\n\n## Migration Workflow\n\n### Option 1: Dashboard + Diff (Quick Prototyping)\n```bash\n# 1. Make changes in local Studio (localhost:54323)\n# 2. Generate migration from diff\nsupabase db diff -f \u003Cmigration_name>\n\n# 3. Review generated SQL\ncat supabase\u002Fmigrations\u002F*_\u003Cmigration_name>.sql\n\n# 4. Reset to test\nsupabase db reset\n```\n\n### Option 2: Write Migrations Directly (Recommended)\n```bash\n# 1. Create empty migration\nsupabase migration new create_users_table\n\n# 2. Edit the migration file\n# supabase\u002Fmigrations\u002F\u003Ctimestamp>_create_users_table.sql\n\n# 3. Apply locally\nsupabase db reset\n```\n\n### Option 3: ORM Migrations (Best DX)\nUse Drizzle (TypeScript) or SQLAlchemy (Python) - see framework-specific skills.\n\n### Deploy Migrations\n```bash\n# Push to remote (staging\u002Fproduction)\nsupabase db push\n\n# Check migration status\nsupabase migration list\n```\n\n---\n\n## Database Patterns\n\n### Enable RLS on All Tables\n```sql\n-- Always enable RLS\nALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;\n\n-- Default deny - must create policies\nCREATE POLICY \"Users can view own profile\"\n  ON public.profiles\n  FOR SELECT\n  USING (auth.uid() = id);\n```\n\n### Common RLS Policies\n```sql\n-- Public read\nCREATE POLICY \"Public read access\"\n  ON public.posts FOR SELECT\n  USING (true);\n\n-- Authenticated users only\nCREATE POLICY \"Authenticated users can insert\"\n  ON public.posts FOR INSERT\n  WITH CHECK (auth.role() = 'authenticated');\n\n-- Owner access\nCREATE POLICY \"Users can update own records\"\n  ON public.posts FOR UPDATE\n  USING (auth.uid() = user_id);\n\n-- Admin access (using custom claim)\nCREATE POLICY \"Admins have full access\"\n  ON public.posts FOR ALL\n  USING (auth.jwt() ->> 'role' = 'admin');\n```\n\n### Link to auth.users\n```sql\n-- Profile table linked to auth\nCREATE TABLE public.profiles (\n  id UUID PRIMARY KEY REFERENCES auth.users(id) ON DELETE CASCADE,\n  username TEXT UNIQUE NOT NULL,\n  avatar_url TEXT,\n  created_at TIMESTAMPTZ DEFAULT NOW()\n);\n\n-- Auto-create profile on signup\nCREATE OR REPLACE FUNCTION public.handle_new_user()\nRETURNS TRIGGER AS $$\nBEGIN\n  INSERT INTO public.profiles (id, username)\n  VALUES (NEW.id, NEW.email);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql SECURITY DEFINER;\n\nCREATE TRIGGER on_auth_user_created\n  AFTER INSERT ON auth.users\n  FOR EACH ROW EXECUTE FUNCTION public.handle_new_user();\n```\n\n---\n\n## Seed Data\n\n### supabase\u002Fseed.sql\n```sql\n-- Runs on `supabase db reset`\n-- Use ON CONFLICT for idempotency\n\nINSERT INTO public.profiles (id, username, avatar_url)\nVALUES\n  ('d0e1f2a3-b4c5-6d7e-8f9a-0b1c2d3e4f5a', 'testuser', null),\n  ('a1b2c3d4-e5f6-7a8b-9c0d-1e2f3a4b5c6d', 'admin', null)\nON CONFLICT (id) DO NOTHING;\n```\n\n---\n\n## Environment Variables\n\n### Required Variables\n```bash\n# Public (safe for client-side)\nSUPABASE_URL=https:\u002F\u002Fxxxxx.supabase.co\nSUPABASE_ANON_KEY=eyJ...\n\n# Private (server-side only - NEVER expose)\nSUPABASE_SERVICE_ROLE_KEY=eyJ...\nDATABASE_URL=postgresql:\u002F\u002Fpostgres.[ref]:[password]@aws-0-region.pooler.supabase.com:6543\u002Fpostgres\n```\n\n### Local vs Production\n```bash\n# .env.local (local development)\nSUPABASE_URL=http:\u002F\u002Flocalhost:54321\nSUPABASE_ANON_KEY=\u003Cfrom supabase start>\nDATABASE_URL=postgresql:\u002F\u002Fpostgres:postgres@localhost:54322\u002Fpostgres\n\n# .env.production (remote)\nSUPABASE_URL=https:\u002F\u002Fxxxxx.supabase.co\nSUPABASE_ANON_KEY=\u003Cfrom dashboard>\nDATABASE_URL=\u003Cconnection pooler URL>\n```\n\n### Connection Pooling\n```bash\n# Transaction mode (recommended for serverless)\n# Add ?pgbouncer=true to URL\nDATABASE_URL=postgresql:\u002F\u002F...@pooler.supabase.com:6543\u002Fpostgres?pgbouncer=true\n\n# Session mode (for migrations, long transactions)\nDATABASE_URL=postgresql:\u002F\u002F...@pooler.supabase.com:5432\u002Fpostgres\n```\n\n---\n\n## Edge Functions\n\n### Create Function\n```bash\nsupabase functions new hello-world\n```\n\n### Basic Structure\n```typescript\n\u002F\u002F supabase\u002Ffunctions\u002Fhello-world\u002Findex.ts\nimport { serve } from 'https:\u002F\u002Fdeno.land\u002Fstd@0.168.0\u002Fhttp\u002Fserver.ts';\n\nserve(async (req) => {\n  const { name } = await req.json();\n\n  return new Response(\n    JSON.stringify({ message: `Hello ${name}!` }),\n    { headers: { 'Content-Type': 'application\u002Fjson' } }\n  );\n});\n```\n\n### With Auth Context\n```typescript\nimport { serve } from 'https:\u002F\u002Fdeno.land\u002Fstd@0.168.0\u002Fhttp\u002Fserver.ts';\nimport { createClient } from 'https:\u002F\u002Fesm.sh\u002F@supabase\u002Fsupabase-js@2';\n\nserve(async (req) => {\n  const supabase = createClient(\n    Deno.env.get('SUPABASE_URL') ?? '',\n    Deno.env.get('SUPABASE_ANON_KEY') ?? '',\n    {\n      global: {\n        headers: { Authorization: req.headers.get('Authorization')! },\n      },\n    }\n  );\n\n  const { data: { user } } = await supabase.auth.getUser();\n\n  if (!user) {\n    return new Response('Unauthorized', { status: 401 });\n  }\n\n  return new Response(JSON.stringify({ user_id: user.id }));\n});\n```\n\n### Deploy\n```bash\n# Serve locally\nsupabase functions serve\n\n# Deploy single function\nsupabase functions deploy hello-world\n\n# Deploy all\nsupabase functions deploy\n```\n\n---\n\n## Storage\n\n### Create Bucket (in migration)\n```sql\nINSERT INTO storage.buckets (id, name, public)\nVALUES ('avatars', 'avatars', true);\n\n-- Storage policies\nCREATE POLICY \"Avatar images are publicly accessible\"\n  ON storage.objects FOR SELECT\n  USING (bucket_id = 'avatars');\n\nCREATE POLICY \"Users can upload own avatar\"\n  ON storage.objects FOR INSERT\n  WITH CHECK (\n    bucket_id = 'avatars' AND\n    auth.uid()::text = (storage.foldername(name))[1]\n  );\n```\n\n---\n\n## CLI Quick Reference\n\n```bash\n# Lifecycle\nsupabase start                   # Start local stack\nsupabase stop                    # Stop local stack\nsupabase status                  # Show status & credentials\n\n# Database\nsupabase db reset                # Reset + migrations + seed\nsupabase db push                 # Push to remote\nsupabase db pull                 # Pull remote schema\nsupabase db diff -f \u003Cname>       # Generate migration from diff\nsupabase db lint                 # Check for issues\n\n# Migrations\nsupabase migration new \u003Cname>    # Create migration\nsupabase migration list          # List migrations\nsupabase migration up            # Apply pending (remote)\n\n# Functions\nsupabase functions new \u003Cname>    # Create function\nsupabase functions serve         # Local dev\nsupabase functions deploy        # Deploy all\n\n# Types\nsupabase gen types typescript --local > types\u002Fdatabase.ts\n\n# Project\nsupabase link --project-ref \u003Cid> # Link to remote\nsupabase projects list           # List projects\n```\n\n---\n\n## CI\u002FCD Template\n\n```yaml\n# .github\u002Fworkflows\u002Fsupabase.yml\nname: Supabase CI\u002FCD\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\nenv:\n  SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}\n  SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }}\n  SUPABASE_PROJECT_ID: ${{ secrets.SUPABASE_PROJECT_ID }}\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: supabase\u002Fsetup-cli@v1\n\n      - name: Start Supabase\n        run: supabase start\n\n      - name: Run migrations\n        run: supabase db reset\n\n      - name: Lint database\n        run: supabase db lint\n\n  deploy:\n    needs: test\n    if: github.ref == 'refs\u002Fheads\u002Fmain'\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: supabase\u002Fsetup-cli@v1\n\n      - name: Link project\n        run: supabase link --project-ref $SUPABASE_PROJECT_ID\n\n      - name: Push migrations\n        run: supabase db push\n\n      - name: Deploy functions\n        run: supabase functions deploy\n```\n\n---\n\n## Anti-Patterns\n\n- **Direct production changes** - Always use migrations\n- **Disabled RLS** - Enable on all user-data tables\n- **Service key in client** - Never expose service role key\n- **No connection pooling** - Use pooler for serverless\n- **Committing .env** - Add to .gitignore\n- **Skipping migration review** - Always check generated SQL\n- **No seed data** - Use seed.sql for consistent local dev\n","# Supabase Core Skill\n\n*Load with: base.md + [supabase-nextjs.md | supabase-python.md | supabase-node.md]*\n\nCore concepts, CLI workflow, and patterns common to all Supabase projects.\n\n**Sources:** [Supabase Docs](https:\u002F\u002Fsupabase.com\u002Fdocs) | [Supabase CLI](https:\u002F\u002Fsupabase.com\u002Fdocs\u002Fguides\u002Flocal-development\u002Fcli\u002Fgetting-started)\n\n---\n\n## Core Principle\n\n**Local-first, migrations in version control, never touch production directly.**\n\nDevelop locally with the Supabase CLI, capture all changes as migrations, and deploy through CI\u002FCD.\n\n---\n\n## Supabase Stack\n\n| Service | Purpose |\n|---------|---------|\n| **Database** | PostgreSQL with extensions |\n| **Auth** | User authentication, OAuth providers |\n| **Storage** | File storage with RLS |\n| **Edge Functions** | Serverless Deno functions |\n| **Realtime** | WebSocket subscriptions |\n| **Vector** | AI embeddings (pgvector) |\n\n---\n\n## CLI Setup\n\n### Install & Login\n```bash\n# macOS\nbrew install supabase\u002Ftap\u002Fsupabase\n\n# npm (alternative)\nnpm install -g supabase\n\n# Login\nsupabase login\n```\n\n### Initialize Project\n```bash\n# In your project directory\nsupabase init\n\n# Creates:\n# supabase\u002F\n# ├── config.toml      # Local config\n# ├── seed.sql         # Seed data\n# └── migrations\u002F      # SQL migrations\n```\n\n### Link to Remote\n```bash\n# Get project ref from dashboard URL: https:\u002F\u002Fsupabase.com\u002Fdashboard\u002Fproject\u002F\u003Cref>\nsupabase link --project-ref \u003Cproject-id>\n\n# Pull existing schema\nsupabase db pull\n```\n\n### Start Local Stack\n```bash\nsupabase start\n\n# Output:\n# API URL: http:\u002F\u002Flocalhost:54321\n# GraphQL URL: http:\u002F\u002Flocalhost:54321\u002Fgraphql\u002Fv1\n# DB URL: postgresql:\u002F\u002Fpostgres:postgres@localhost:54322\u002Fpostgres\n# Studio URL: http:\u002F\u002Flocalhost:54323\n# Anon key: eyJ...\n# Service role key: eyJ...\n```\n\n---\n\n## Migration Workflow\n\n### Option 1: Dashboard + Diff (Quick Prototyping)\n```bash\n# 1. Make changes in local Studio (localhost:54323)\n# 2. Generate migration from diff\nsupabase db diff -f \u003Cmigration_name>\n\n# 3. Review generated SQL\ncat supabase\u002Fmigrations\u002F*_\u003Cmigration_name>.sql\n\n# 4. Reset to test\nsupabase db reset\n```\n\n### Option 2: Write Migrations Directly (Recommended)\n```bash\n# 1. Create empty migration\nsupabase migration new create_users_table\n\n# 2. Edit the migration file\n# supabase\u002Fmigrations\u002F\u003Ctimestamp>_create_users_table.sql\n\n# 3. Apply locally\nsupabase db reset\n```\n\n### Option 3: ORM Migrations (Best DX)\nUse Drizzle (TypeScript) or SQLAlchemy (Python) - see framework-specific skills.\n\n### Deploy Migrations\n```bash\n# Push to remote (staging\u002Fproduction)\nsupabase db push\n\n# Check migration status\nsupabase migration list\n```\n\n---\n\n## Database Patterns\n\n### Enable RLS on All Tables\n```sql\n-- Always enable RLS\nALTER TABLE public.profiles ENABLE ROW LEVEL SECURITY;\n\n-- Default deny - must create policies\nCREATE POLICY \"Users can view own profile\"\n  ON public.profiles\n  FOR SELECT\n  USING (auth.uid() = id);\n```\n\n### Common RLS Policies\n```sql\n-- Public read\nCREATE POLICY \"Public read access\"\n  ON public.posts FOR SELECT\n  USING (true);\n\n-- Authenticated users only\nCREATE POLICY \"Authenticated users can insert\"\n  ON public.posts FOR INSERT\n  WITH CHECK (auth.role() = 'authenticated');\n\n-- Owner access\nCREATE POLICY \"Users can update own records\"\n  ON public.posts FOR UPDATE\n  USING (auth.uid() = user_id);\n\n-- Admin access (using custom claim)\nCREATE POLICY \"Admins have full access\"\n  ON public.posts FOR ALL\n  USING (auth.jwt() ->> 'role' = 'admin');\n```\n\n### Link to auth.users\n```sql\n-- Profile table linked to auth\nCREATE TABLE public.profiles (\n  id UUID PRIMARY KEY REFERENCES auth.users(id) ON DELETE CASCADE,\n  username TEXT UNIQUE NOT NULL,\n  avatar_url TEXT,\n  created_at TIMESTAMPTZ DEFAULT NOW()\n);\n\n-- Auto-create profile on signup\nCREATE OR REPLACE FUNCTION public.handle_new_user()\nRETURNS TRIGGER AS $$\nBEGIN\n  INSERT INTO public.profiles (id, username)\n  VALUES (NEW.id, NEW.email);\n  RETURN NEW;\nEND;\n$$ LANGUAGE plpgsql SECURITY DEFINER;\n\nCREATE TRIGGER on_auth_user_created\n  AFTER INSERT ON auth.users\n  FOR EACH ROW EXECUTE FUNCTION public.handle_new_user();\n```\n\n---\n\n## Seed Data\n\n### supabase\u002Fseed.sql\n```sql\n-- Runs on `supabase db reset`\n-- Use ON CONFLICT for idempotency\n\nINSERT INTO public.profiles (id, username, avatar_url)\nVALUES\n  ('d0e1f2a3-b4c5-6d7e-8f9a-0b1c2d3e4f5a', 'testuser', null),\n  ('a1b2c3d4-e5f6-7a8b-9c0d-1e2f3a4b5c6d', 'admin', null)\nON CONFLICT (id) DO NOTHING;\n```\n\n---\n\n## Environment Variables\n\n### Required Variables\n```bash\n# Public (safe for client-side)\nSUPABASE_URL=https:\u002F\u002Fxxxxx.supabase.co\nSUPABASE_ANON_KEY=eyJ...\n\n# Private (server-side only - NEVER expose)\nSUPABASE_SERVICE_ROLE_KEY=eyJ...\nDATABASE_URL=postgresql:\u002F\u002Fpostgres.[ref]:[password]@aws-0-region.pooler.supabase.com:6543\u002Fpostgres\n```\n\n### Local vs Production\n```bash\n# .env.local (local development)\nSUPABASE_URL=http:\u002F\u002Flocalhost:54321\nSUPABASE_ANON_KEY=\u003Cfrom supabase start>\nDATABASE_URL=postgresql:\u002F\u002Fpostgres:postgres@localhost:54322\u002Fpostgres\n\n# .env.production (remote)\nSUPABASE_URL=https:\u002F\u002Fxxxxx.supabase.co\nSUPABASE_ANON_KEY=\u003Cfrom dashboard>\nDATABASE_URL=\u003Cconnection pooler URL>\n```\n\n### Connection Pooling\n```bash\n# Transaction mode (recommended for serverless)\n# Add ?pgbouncer=true to URL\nDATABASE_URL=postgresql:\u002F\u002F...@pooler.supabase.com:6543\u002Fpostgres?pgbouncer=true\n\n# Session mode (for migrations, long transactions)\nDATABASE_URL=postgresql:\u002F\u002F...@pooler.supabase.com:5432\u002Fpostgres\n```\n\n---\n\n## Edge Functions\n\n### Create Function\n```bash\nsupabase functions new hello-world\n```\n\n### Basic Structure\n```typescript\n\u002F\u002F supabase\u002Ffunctions\u002Fhello-world\u002Findex.ts\nimport { serve } from 'https:\u002F\u002Fdeno.land\u002Fstd@0.168.0\u002Fhttp\u002Fserver.ts';\n\nserve(async (req) => {\n  const { name } = await req.json();\n\n  return new Response(\n    JSON.stringify({ message: `Hello ${name}!` }),\n    { headers: { 'Content-Type': 'application\u002Fjson' } }\n  );\n});\n```\n\n### With Auth Context\n```typescript\nimport { serve } from 'https:\u002F\u002Fdeno.land\u002Fstd@0.168.0\u002Fhttp\u002Fserver.ts';\nimport { createClient } from 'https:\u002F\u002Fesm.sh\u002F@supabase\u002Fsupabase-js@2';\n\nserve(async (req) => {\n  const supabase = createClient(\n    Deno.env.get('SUPABASE_URL') ?? '',\n    Deno.env.get('SUPABASE_ANON_KEY') ?? '',\n    {\n      global: {\n        headers: { Authorization: req.headers.get('Authorization')! },\n      },\n    }\n  );\n\n  const { data: { user } } = await supabase.auth.getUser();\n\n  if (!user) {\n    return new Response('Unauthorized', { status: 401 });\n  }\n\n  return new Response(JSON.stringify({ user_id: user.id }));\n});\n```\n\n### Deploy\n```bash\n# Serve locally\nsupabase functions serve\n\n# Deploy single function\nsupabase functions deploy hello-world\n\n# Deploy all\nsupabase functions deploy\n```\n\n---\n\n## Storage\n\n### Create Bucket (in migration)\n```sql\nINSERT INTO storage.buckets (id, name, public)\nVALUES ('avatars', 'avatars', true);\n\n-- Storage policies\nCREATE POLICY \"Avatar images are publicly accessible\"\n  ON storage.objects FOR SELECT\n  USING (bucket_id = 'avatars');\n\nCREATE POLICY \"Users can upload own avatar\"\n  ON storage.objects FOR INSERT\n  WITH CHECK (\n    bucket_id = 'avatars' AND\n    auth.uid()::text = (storage.foldername(name))[1]\n  );\n```\n\n---\n\n## CLI Quick Reference\n\n```bash\n# Lifecycle\nsupabase start                   # Start local stack\nsupabase stop                    # Stop local stack\nsupabase status                  # Show status & credentials\n\n# Database\nsupabase db reset                # Reset + migrations + seed\nsupabase db push                 # Push to remote\nsupabase db pull                 # Pull remote schema\nsupabase db diff -f \u003Cname>       # Generate migration from diff\nsupabase db lint                 # Check for issues\n\n# Migrations\nsupabase migration new \u003Cname>    # Create migration\nsupabase migration list          # List migrations\nsupabase migration up            # Apply pending (remote)\n\n# Functions\nsupabase functions new \u003Cname>    # Create function\nsupabase functions serve         # Local dev\nsupabase functions deploy        # Deploy all\n\n# Types\nsupabase gen types typescript --local > types\u002Fdatabase.ts\n\n# Project\nsupabase link --project-ref \u003Cid> # Link to remote\nsupabase projects list           # List projects\n```\n\n---\n\n## CI\u002FCD Template\n\n```yaml\n# .github\u002Fworkflows\u002Fsupabase.yml\nname: Supabase CI\u002FCD\n\non:\n  push:\n    branches: [main]\n  pull_request:\n\nenv:\n  SUPABASE_ACCESS_TOKEN: ${{ secrets.SUPABASE_ACCESS_TOKEN }}\n  SUPABASE_DB_PASSWORD: ${{ secrets.SUPABASE_DB_PASSWORD }}\n  SUPABASE_PROJECT_ID: ${{ secrets.SUPABASE_PROJECT_ID }}\n\njobs:\n  test:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: supabase\u002Fsetup-cli@v1\n\n      - name: Start Supabase\n        run: supabase start\n\n      - name: Run migrations\n        run: supabase db reset\n\n      - name: Lint database\n        run: supabase db lint\n\n  deploy:\n    needs: test\n    if: github.ref == 'refs\u002Fheads\u002Fmain'\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions\u002Fcheckout@v4\n      - uses: supabase\u002Fsetup-cli@v1\n\n      - name: Link project\n        run: supabase link --project-ref $SUPABASE_PROJECT_ID\n\n      - name: Push migrations\n        run: supabase db push\n\n      - name: Deploy functions\n        run: supabase functions deploy\n```\n\n---\n\n## Anti-Patterns\n\n- **Direct production changes** - Always use migrations\n- **Disabled RLS** - Enable on all user-data tables\n- **Service key in client** - Never expose service role key\n- **No connection pooling** - Use pooler for serverless\n- **Committing .env** - Add to .gitignore\n- **Skipping migration review** - Always check generated SQL\n- **No seed data** - Use seed.sql for consistent local dev\n",{"name":5,"description":7},"main","f2ec4b3b9133d34eeaf9b38e4b0a97e8e5705a7f","benchmarks\u002Ffinal\u002Fskills\u002Fasset1__alinaqi--supabase",0,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard","https:\u002F\u002Fgithub.com\u002FJSGforever","2026-08-29 18:27:56",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add JSGforever\u002Fskillguard --skill supabase",{"tool":49,"command":50},"bunx","bunx skills add JSGforever\u002Fskillguard --skill supabase",{"tool":52,"command":53},"pnpm","pnpm dlx skills add JSGforever\u002Fskillguard --skill supabase","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__alinaqi--supabase\u002FSKILL.md",true,[],[58,90,102,129,151,172],{"skillNo":59,"name":60,"nameZh":6,"description":61,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":62,"categories":63,"keywords":69,"publishedAt":31},"01M71HY2SNXBA9Q00WZDTZQ31Z","skillguard-codex-scanner","Hybrid deterministic+LLM agent-skill security scanner. Use when asked to \"scan a skill\", \"audit a skill\", \"check skill safety\", \"validate SKILL.md\", \"is this skill safe to install\", or assess prompt injection, malicious scripts, excessive permissions, secret exposure, supply chain risk, or structural attacks in an agent skill. Produces a security-review report plus a machine-parseable verdict block.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fsrc\u002Fskillguard\u002Fstatic_scanner\u002Fskillguard-codex-scanner\u002FSKILL.md",[64],{"categoryNo":65,"categoryName":66,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89],"scanner","skillguard codex scanner","skillguard","codex","chain","skill security","security-review","review report","structural","secret","prompt injection","security scanner","when","review","malicious","permissions","exposure","audit","scripts","safe",{"skillNo":91,"name":92,"nameZh":6,"description":93,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":94,"licenseFileUrl":6,"sourceHtmlUrl":95,"categories":96,"keywords":98,"publishedAt":31},"01M71HY0SPKTT3S27BC2HPAC5M","data-exfiltrator","Analyzes data files","MIT","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Fsmoke-one-skill\u002Fasset1__cisco-ai-defense--data-exfiltrator\u002FSKILL.md",[97],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},[99,100,101],"data","data exfiltrator","files",{"skillNo":103,"name":104,"nameZh":6,"description":105,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":106,"categories":107,"keywords":108,"publishedAt":31},"01M71HXVS9EMN44BGDW215FZ72","real-time-collaboration-engine","Build real-time collaborative editing with WebSockets, OT\u002FCRDT conflict resolution, and presence awareness. Implements cursor tracking, optimistic updates, and offline sync. Use for collaborative editors, whiteboards, video editing. Activate on \"real-time collaboration\", \"WebSocket sync\", \"multiplayer editing\", \"CRDT\", \"presence awareness\". NOT for simple chat, request-response APIs, or single-user apps.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--real-time-collaboration-engine\u002FSKILL.md",[],[109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128],"time","real time collaboration engine","real time collaboration","collaboration","engine","real time","Video","reliability","video editing","performance","conflict resolution","presence","access","apps","updates","Bash","activate","optimizer","react","streaming",{"skillNo":130,"name":131,"nameZh":6,"description":132,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":133,"categories":134,"keywords":138,"publishedAt":31},"01M71HXP6CTY4KFN0QVMMN0V7J","react-performance-optimizer","Optimize React apps for 60fps performance. Implements memoization, virtualization, code splitting, bundle optimization. Use for slow renders, large lists, bundle bloat. Activate on \"React performance\", \"slow render\", \"useMemo\", \"bundle size\", \"virtualization\". NOT for backend optimization, non-React frameworks, or premature optimization.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--react-performance-optimizer\u002FSKILL.md",[135],{"categoryNo":136,"categoryName":137,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000009","前端开发",[118,139,126,127,140,141,142,143,144,145,109,146,147,122,124,148,125,128,149,150],"react performance optimizer","react performance","performance optimizer","app","nextjs","expert","re","render","2025","code","router","strategies",{"skillNo":152,"name":153,"nameZh":6,"description":154,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":155,"categories":156,"keywords":158,"publishedAt":31},"01M71HXH7QXSQB4QTDZ7SP7YXQ","llm-streaming-response-handler","Build production LLM streaming UIs with Server-Sent Events, real-time token display, cancellation, error recovery. Handles OpenAI\u002FAnthropic\u002FClaude streaming APIs. Use for chatbots, AI assistants, real-time text generation. Activate on \"LLM streaming\", \"SSE\", \"token stream\", \"chat UI\", \"real-time AI\". NOT for batch processing, non-streaming APIs, or WebSocket bidirectional chat.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--llm-streaming-response-handler\u002FSKILL.md",[157],{"categoryNo":136,"categoryName":137,"taxonomyType":67,"taxonomyTypeDesc":68},[159,128,160,161,162,163,118,109,164,165,166,124,125,126,167,127,168,169,170,171],"llm streaming response handler","handler","error","processing","retry","chat ui","error recovery","critical","batch","display","text","server","read",{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":176,"categories":177,"keywords":185,"publishedAt":31},"01M71HXCB0E1YRKYW1Y8T0Y106","github-actions-pipeline-builder","Build production CI\u002FCD pipelines with GitHub Actions. Implements matrix builds, caching, deployments, testing, security scanning. Use for automated testing, deployments, release workflows. Activate on \"GitHub Actions\", \"CI\u002FCD\", \"workflow\", \"deployment pipeline\", \"automated testing\". NOT for Jenkins\u002FCircleCI, manual deployments, or non-GitHub repositories.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--github-actions-pipeline-builder\u002FSKILL.md",[178,181,184],{"categoryNo":179,"categoryName":180,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":182,"categoryName":183,"taxonomyType":67,"taxonomyTypeDesc":68},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":65,"categoryName":66,"taxonomyType":67,"taxonomyTypeDesc":68},[186,187,188,189,190,191,192,116,144,193,194,195,125,150,196,171,197,198,199,200],"github actions pipeline builder","actions","github actions","pipeline builder","github","builder","pipeline","testing","ci","workflows","run","release","write","edit","git"]