Skill UI

Performs OWASP-guided security scans on PostgreSQL and MySQL databases via the database-security-scanner plugin, identifying weak passwords, SQL injection risks, and misconfigurations while generating reports and remediation advice.

A comprehensive toolset for the full backend development lifecycle. This suite enables developers to scaffold API routes from OpenAPI specifications, manage complex database migrations and optimization (PostgreSQL), and perform rigorous load/performance testing. It supports building robust microservices, securing REST APIs, and ensuring system scalability.

A comprehensive skill for optimizing complex SQL queries, designing robust database schemas, and troubleshooting performance bottlenecks across various dialects (PostgreSQL, MySQL, etc.). Use this when queries are slow, complex set-based logic is needed (CTEs, Window Functions), or when structuring/migrating a database schema. It provides detailed query plan analysis, advanced indexing strategies, and industry best practices.

Guides using SQLMap to automate SQL injection discovery, enumerate databases/tables/columns, dump data, and collect hashes across MySQL/PostgreSQL/MSSQL/Oracle during authorized penetration tests.

Guides analysts through automated SQL injection discovery and exploitation with SQLMap, covering enumeration, table/column mapping, data dumping, and advanced targeting across MySQL, PostgreSQL, MSSQL, Oracle, and other databases during authorized penetration tests.

A comprehensive guide for deep PostgreSQL diagnostics, designed for advanced troubleshooting when standard methods fail. Covers using pg_stat_statements for identifying slow queries, analyzing lock contention with pg_locks, detecting connection leaks, debugging RLS policy conflicts, and profiling Edge Function cold starts. Essential for performance regression investigation and escalating issues to support.

This module provides the essential three pillars for building robust full-stack applications on Supabase. It implements comprehensive user authentication (including OAuth, email/password, and session management), secure file storage (uploading, downloading, and managing signed URLs), and real-time data subscriptions (listening to Postgres changes, presence, and broadcasts). It is crucial for developing modern, live-updating, and highly secure web services.

A comprehensive diagnostic guide for resolving common errors across the entire Supabase stack, including PostgREST, PostgreSQL, Authentication, and Storage. Use this tool when encountering specific error codes (e.g., PGRST301, 42501) or debugging complex API failures like RLS violations or session expiry. It provides step-by-step instructions for identifying the error layer and applying the correct fix.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

This comprehensive guide details the complete workflow for setting up and maintaining a local Supabase development environment. It utilizes Docker and the Supabase CLI to run the entire full-stack service (Postgres, Auth, Storage, etc.) locally. It guides developers through initialization, creating version-controlled migrations using diff, seeding data, and performing clean database resets, ensuring local iteration accurately mirrors production capabilities.

This comprehensive deep dive guides you through the entire database migration lifecycle using the Supabase CLI. Learn best practices for executing zero-downtime schema changes, safely backfilling data in production, managing schema versioning across environments, and implementing robust rollback strategies. Covers advanced PostgreSQL concepts like concurrent indexing and multi-phase column renaming.

This comprehensive guide provides systematic methods to optimize Supabase query and database performance. Techniques cover PostgreSQL indexing (basic, composite, partial), using EXPLAIN ANALYZE for query plan analysis, optimizing client calls (column selection, pagination), and managing infrastructure resources like connection pooling. Use this when facing slow queries, high latency, or preparing a project for production-scale traffic.