Why does the skill avoid 'FOR ALL' in policy generation?

It follows the best practice of creating separate policies for SELECT, INSERT, UPDATE, and DELETE to ensure granular control and prevent accidental permission leaks that can occur with broad 'ALL' policies.

Does it support Multi-Factor Authentication (MFA)?

Yes, it provides specific syntax for creating restrictive policies that verify the Authenticator Assurance Level (aal) from the user's JWT metadata.

How does this skill handle RLS performance issues?

The skill automatically implements best practices such as wrapping helper functions like auth.uid() in SELECT statements to enable PostgreSQL plan caching and recommends specific indexing strategies for policy-bound columns.

Can I use this for multi-tenant applications?

Yes, it includes built-in patterns for team-based access control and JWT-based metadata checks, making it ideal for complex multi-tenant architectures.

Supabase RLS Policy Expert

Name: Supabase RLS Policy Expert
Author: linehaul-ai

bylinehaul-ai

•

データベース管理

Generates production-ready, optimized PostgreSQL row-level security (RLS) policies for Supabase databases following security best practices.

The Supabase RLS Policy Expert skill provides specialized guidance for implementing robust, table-level security in Supabase environments. It automates the generation of production-ready PostgreSQL row-level security policies, ensuring proper syntax for authentication roles and helper functions while applying critical performance optimizations like function caching and join minimization. Whether you are building owner-based access controls or complex multi-tenant systems, this skill helps you write secure, scalable, and efficient authorization logic while avoiding common pitfalls like unindexed lookups or incorrect operation mapping.

主な機能

01Guidance on performance optimizations like index usage and initPlan caching

021 GitHub stars

03Optimized SQL policy generation with performance-first syntax

04Seamless integration of Supabase-specific roles and helper functions

05Implementation of complex access control patterns including Owner, Team, and MFA based rules

06Automated validation against PostgreSQL and Supabase-specific syntax requirements

ユースケース

01Setting up fine-grained access control for sensitive user data tables

02Refactoring slow RLS policies to improve database query performance

03Implementing multi-tenant or team-based permissions using Supabase Auth and JWT metadata

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add linehaul-ai/linehaulai-claude-marketplace supabase-rls-policy

For use in Claude.ai and ChatGPT

Download Skill