Supabase Complete Documentation
v0.1.0Complete Supabase platform documentation. Use when working with Supabase - covers authentication (email, OAuth, magic links, phone, SSO), database (PostgreSQL, RLS, migrations), storage (file uploads, CDN), edge functions, realtime subscriptions, AI/embeddings, cron jobs, queues, and platform management. Includes framework integrations (Next.js, React, SvelteKit, etc.).
⭐ 10· 6.8k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the packaged contents: a large collection of Supabase docs covering auth, DB, storage, functions, realtime, AI, etc. The skill asks for no binaries, env vars, or installs — appropriate for a read-only documentation skill. The single small code file (navigation.references.ts) is plausibly navigation metadata for the docs.
Instruction Scope
SKILL.md limits the agent to reading files under references/ and explicitly warns agents NOT to auto-execute example commands; that keeps runtime scope narrow. However, the included documentation contains many example commands and snippets that reference API tokens, curl calls, and obtaining secrets (e.g., SUPABASE_ACCESS_TOKEN, sb_secret_...). Those are expected in documentation but are sensitive if executed or exfiltrated, so follow the explicit warning and do not auto-run snippets.
Install Mechanism
No install spec — instruction-only skill. Nothing is downloaded or written to disk by an installer, which is the lowest-risk installation model.
Credentials
The skill declares no required environment variables, credentials, or config paths. The presence of many examples that mention obtaining tokens or using service_role keys is normal for documentation, but these are examples only and the skill itself does not request them.
Persistence & Privilege
always:false and no special privileges requested. The skill is user-invocable and may be invoked autonomously by the agent (platform default), but it does not request permanent system presence or modify other skills or system configs.
Scan Findings in Context
[base64-block] unexpected: Pre-scan flagged a 'base64-block' pattern in the SKILL.md content. The visible SKILL.md shown here does not contain an obvious base64 payload; this may be in one of the many truncated files. A base64 block in documentation is unexpected and worth inspecting — it can be benign (embedded images or encoded snippets) but can also hide obfuscated content. Review files that contain long opaque blocks or large embedded assets before trusting the package.
Assessment
This skill is a packaged copy of Supabase documentation and appears coherent for that purpose — it does not request secrets or install software. Still, before installing or enabling it for autonomous use: 1) Verify the source (the package lists 'unknown'); prefer official or GitHub-sourced documentation when possible. 2) Inspect any files that contain long opaque strings (search for 'base64', 'data:image', or very long single-line blocks) and open the navigation TypeScript file to confirm it isn't executing logic. 3) Remember the SKILL.md warning: do NOT auto-run command examples (they often show how to use tokens or curl with bearer secrets). 4) If you enable autonomous invocation for agents, be cautious — documentation contains examples that reference credentials; ensure the agent is not allowed to execute shell commands or to send extracted secrets to external endpoints. If you want to be extra cautious, use the official Supabase docs online or install a skill only from a verified source.Like a lobster shell, security has layers — review code before you run it.
authvk973xpaktbmy3rs20whpj6ancx80qdp8databasevk973xpaktbmy3rs20whpj6ancx80qdp8documentationvk973xpaktbmy3rs20whpj6ancx80qdp8edgevk973xpaktbmy3rs20whpj6ancx80qdp8functionsvk973xpaktbmy3rs20whpj6ancx80qdp8latestvk973xpaktbmy3rs20whpj6ancx80qdp8postgresvk973xpaktbmy3rs20whpj6ancx80qdp8realtimevk973xpaktbmy3rs20whpj6ancx80qdp8serverlessvk973xpaktbmy3rs20whpj6ancx80qdp8storagevk973xpaktbmy3rs20whpj6ancx80qdp8supabasevk973xpaktbmy3rs20whpj6ancx80qdp8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.