Supabase Skill Pack

30 production-grade Claude Code skills for Supabase: real @supabase/supabase-js v2 client methods, real PostgreSQL RLS policies, real Edge Functions, real Supabase CLI workflows.

Installation

/plugin install supabase-pack@claude-code-plugins-plus

What Makes This Different

Every skill contains real, copy-paste-ready code. No placeholder // Step 1 implementation stubs. Real createClient() initialization, real supabase.from().select().eq() queries, real supabase.auth.signUp() calls, real alter table enable row level security policies, real supabase functions deploy workflows.

Skills (30)

Getting Started (S01-S06)

| Skill | What It Does | |-------|-------------| | supabase-install-auth | Install @supabase/supabase-js, CLI, configure keys, generate TypeScript types | | supabase-hello-world | First table migration with RLS, INSERT/SELECT/UPDATE/DELETE, filtering, joins | | supabase-local-dev-loop | supabase start, migrations, seeds, db diff, Edge Function hot reload, Vitest | | supabase-sdk-patterns | Typed singleton, service layer, custom errors, retry with backoff, Zod validation | | supabase-schema-from-requirements | Requirements to SQL migration: tables, FKs, indexes, RLS helper functions | | supabase-auth-storage-realtime-core | Auth (signup, OAuth, MFA), Storage (upload, signed URLs, bucket RLS), Realtime (Postgres changes, broadcast, presence) |

Operations (S07-S12)

| Skill | What It Does | |-------|-------------| | supabase-common-errors | PGRST error codes, PostgreSQL errors, Auth/Storage/Realtime diagnostics, RLS debugging | | supabase-debug-bundle | Collect redacted debug bundle: env info, pg_stat_statements, connection health | | supabase-rate-limits | Supabase limits by tier, retry with backoff, request queue, batch operations, idempotency | | supabase-security-basics | Anon vs service role keys, RLS policy patterns, security audit checklist | | supabase-prod-checklist | Full production checklist: RLS, SSL, indexes, PITR, health checks, rollback | | supabase-upgrade-migration | v1-to-v2 breaking changes, auth method renames, code migration steps |

DevOps (P13-P18)

| Skill | What It Does | |-------|-------------| | supabase-ci-integration | GitHub Actions: local Supabase in CI, migration deploy, pgTAP tests, type drift | | supabase-deploy-integration | Edge Functions (Deno), Vercel/Fly.io/Cloud Run deploy, Supavisor connection pooling | | supabase-webhooks-events | Database webhooks, pg_net async HTTP from triggers, Edge Function handlers, Auth hooks | | supabase-performance-tuning | EXPLAIN ANALYZE, index optimization, RLS performance, caching, N+1 elimination | | supabase-cost-tuning | Pricing breakdown, database size audit, storage cleanup, bandwidth reduction | | supabase-reference-architecture | Layered project structure: client layer, service layer, hooks, error handling, health check |

Enterprise (F19-F24)

| Skill | What It Does | |-------|-------------| | supabase-multi-env-setup | Dev/staging/prod with separate Supabase projects, migration promotion, env guards | | supabase-observability | pg_stat_statements, structured logging, instrumented client, health checks, alerting | | supabase-incident-runbook | 5-minute triage, platform vs app isolation, mitigation, communication, postmortem | | supabase-data-handling | PII classification, GDPR deletion, data export, retention policies with pg_cron, audit log | | supabase-enterprise-rbac | Custom roles, JWT custom claims via Auth Hooks, org-scoped RLS, SAML SSO | | supabase-migration-deep-dive | Firebase/MongoDB to Supabase, strangler fig pattern, data migration scripts, auth migration |

Advanced (X25-X30)

| Skill | What It Does | |-------|-------------| | supabase-advanced-troubleshooting | EXPLAIN ANALYZE, RLS step-by-step debug, connection leaks, lock contention, Realtime debug | | supabase-load-scale | k6 load test scripts, connection pool sizing, read replicas, capacity planning | | supabase-reliability-patterns | Circuit breaker, idempotent writes, bulkhead isolation, graceful degradation, DLQ | | supabase-policy-guardrails | ESLint rules, pre-commit secret scanning, CI RLS checks, runtime safety guards | | supabase-architecture-variants | Monolith vs modular monolith vs service layer decision matrix with migration paths | | supabase-known-pitfalls | 12 anti-patterns ranked by severity with fix + detection for each |

Key Technologies Covered

• SDK: @supabase/supabase-js v2, @supabase/ssr, TypeScript generics
• Database: PostgreSQL, PostgREST, Row Level Security, pg_stat_statements, pg_net, pg_cron
• Auth: Email/password, OAuth (Google, GitHub), Magic Links, MFA, SAML SSO, Auth Hooks, JWT custom claims
• Storage: Uploads, signed URLs, public URLs, bucket RLS policies, TUS resumable uploads
• Realtime: Postgres Changes, Broadcast, Presence
• Edge Functions: Deno runtime, supabase functions deploy, local serve with hot reload
• CLI: supabase start, supabase db push, supabase db diff, supabase gen types, supabase migration new
• Deployment: Vercel, Fly.io, Cloud Run, Supavisor connection pooling

Usage

Skills auto-activate based on context. Examples:

• "Help me set up Supabase" activates supabase-install-auth
• "My Supabase query is slow" activates supabase-performance-tuning
• "Set up RLS for my tables" activates supabase-security-basics
• "Deploy my Edge Function" activates supabase-deploy-integration
• "Migrate from Firebase to Supabase" activates supabase-migration-deep-dive

License

MIT