greedychipmunk/agent-skills

Overview

This skill delivers hands-on Supabase development expertise to build production-ready apps using PostgreSQL, authentication, Row Level Security (RLS), Storage, Edge Functions, and Realtime. It focuses on practical patterns, TypeScript client integration, and maintainable project structure to accelerate secure, scalable backends. The content targets engineers who want robust data models, secure access controls, and serverless business logic with Supabase.

How this skill works

I provide implemented patterns and code examples that cover schema design, migrations, database functions, and extensions like pg_vector and PostGIS. Authentication flows (email/password, magic links, OAuth, phone, MFA), RLS policy design, and storage operations (uploads, signed URLs, CDN) are paired with Edge Function templates for API routes, webhooks, and scheduled tasks. Realtime subscriptions, presence tracking, and broadcast channels are demonstrated with client initialization and cleanup best practices.

When to use it

• Building a full-stack app that needs a managed Postgres backend with auth and file storage.
• Implementing multi-tenant or user-scoped access using Row Level Security and custom roles.
• Adding server-side integrations, cron tasks, or webhooks using Supabase Edge Functions.
• Delivering realtime features like live feeds, presence, or change listeners for UI updates.
• Migrating from Firebase to an open-source Postgres-first platform with SQL control.

Best practices

• Enable RLS on public tables and design minimal, tested policies per access pattern.
• Keep migrations small, version-controlled, and test RLS behavior locally before deploy.
• Use service role keys only server-side and validate inputs in Edge Functions.
• Add indexes for frequent queries, paginate with range(), and prefer DB functions for heavy logic.
• Generate TypeScript types from the schema and centralize client initialization for consistency.

Example use cases

• A multi-tenant SaaS with organization-scoped RLS policies, role permissions, and audit triggers.
• A social app with profiles, posts, comments, realtime feeds, and presence tracking.
• A headless CMS using Edge Functions for publishing workflows and signed URLs for private assets.
• An analytics platform leveraging pg_vector and custom DB functions for similarity search and aggregation.
• A mobile app with magic link auth, resumable uploads to storage, and push-like realtime updates.