skillhash

Is supabase-postgres-best-practices safe?

Grade A, 100/100. No meaningful risk found.

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating or altering tables and columns (including choosing column types), schema design, migrations and declarative schema files, RLS policies and the tests that verify them, indexes, triggers, database functions, queues and scheduled jobs (pg_cron, pgmq), vector/semantic search (pgvector), and restoring dumps (pg_restore) or importing data. Also load it when diagnosing slow queries, high CPU, timeouts, EXPLAIN plans, connection exhaustion, locking, bloat, or rows visible to the wrong user or tenant. This is not just a performance guide — schema, migration, security, and SQL authoring tasks need these rules too, even for a one-column change or a single query.

supabase/agent-skills/skills/supabase-postgres-best-practices 2.9kChecked 3h agoContent last changed 3h ago
A

supabase-postgres-best-practices

skills/supabase-postgres-best-practices
100/100 · No meaningful risk foundNo security findings

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating or altering tables and columns (including choosing column types), schema design, migrations and declarative schema files, RLS policies and the tests that verify them, indexes, triggers, database functions, queues and scheduled jobs (pg_cron, pgmq), vector/semantic search (pgvector), and restoring dumps (pg_restore) or importing data. Also load it when diagnosing slow queries, high CPU, timeouts, EXPLAIN plans, connection exhaustion, locking, bloat, or rows visible to the wrong user or tenant. This is not just a performance guide — schema, migration, security, and SQL authoring tasks need these rules too, even for a one-column change or a single query.

Content hash
sha256:3b406baac943593ad8526bc9b841c76b79e26cdc7e10b07fd30755350b59f9ff
Files
36
Quality
100/100

Security findings

None of the 30 rules matched.

Files in this skill
  • CHANGELOG.md5.6 KB
  • SKILL.md3.2 KB
  • references/_contributing.md4.0 KB
  • references/_sections.md1.6 KB
  • references/_template.md1.0 KB
  • references/advanced-full-text-search.md1.4 KB
  • references/advanced-jsonb-indexing.md1.4 KB
  • references/conn-idle-timeout.md1.3 KB
  • references/conn-limits.md1.3 KB
  • references/conn-pooling.md1.3 KB
  • references/conn-prepared-statements.md1.5 KB
  • references/data-batch-inserts.md1.3 KB
  • references/data-n-plus-one.md1.3 KB
  • references/data-pagination.md1.3 KB
  • references/data-upsert.md1.4 KB
  • references/lock-advisory.md1.5 KB
  • references/lock-deadlock-prevention.md1.8 KB
  • references/lock-short-transactions.md1.3 KB
  • references/lock-skip-locked.md1.3 KB
  • references/monitor-explain-analyze.md1.4 KB
  • references/monitor-pg-stat-statements.md1.4 KB
  • references/monitor-vacuum-analyze.md1.5 KB
  • references/query-composite-indexes.md1.4 KB
  • references/query-covering-indexes.md1.3 KB
  • references/query-index-types.md1.5 KB
  • references/query-missing-indexes.md1.2 KB
  • references/query-partial-indexes.md1.3 KB
  • references/schema-constraints.md1.8 KB
  • references/schema-data-types.md1.4 KB
  • references/schema-foreign-key-indexes.md1.6 KB
  • references/schema-lowercase-identifiers.md1.7 KB
  • references/schema-partitioning.md1.5 KB
  • references/schema-primary-keys.md1.8 KB
  • references/security-privileges.md1.5 KB
  • references/security-rls-basics.md1.3 KB
  • references/security-rls-performance.md2.1 KB

Questions about supabase-postgres-best-practices

Is supabase-postgres-best-practices safe to install?
Our scanner gave supabase-postgres-best-practices grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install supabase-postgres-best-practices in Claude Code or Codex?
Run skillhash add github:supabase/agent-skills/skills/supabase-postgres-best-practices. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if supabase-postgres-best-practices changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from supabase/agent-skills