Supabase PostgreSQL Functions

About

This skill provides comprehensive guidance for creating high-quality PostgreSQL functions within the Supabase ecosystem. It enforces critical security patterns such as 'SECURITY INVOKER' and 'search_path' isolation to protect against schema hijacking and privilege escalation. Whether you are building automated triggers, complex business logic, or helper functions for Row-Level Security (RLS), this skill ensures your database-side code follows production-grade standards and integrates seamlessly with Supabase client libraries and PostgREST.

Key Features

• Automatically qualifies database object references to avoid schema resolution attacks
• Prevents common SQL injection vulnerabilities through proper quoting and input validation
• Provides clear patterns for error handling and data validation within PL/pgSQL
• Enforces SECURITY INVOKER and search_path isolation for maximum database security
• 1 GitHub stars
• Generates optimized templates for triggers, stored procedures, and immutable functions

Use Cases

• Building secure trigger functions for automated table operations and data auditing
• Implementing complex backend business logic in the database to optimize performance
• Creating specialized helper functions for hardening Row-Level Security (RLS) policies