Supabase Agent Skills

Supabase Agent Skills is the official set of Agent Skills from Supabase that gives AI coding agents accurate, up-to-date instructions for building on Supabase and Postgres. It bundles two skills — a comprehensive Supabase development skill and a Postgres performance best-practices skill — so your agent writes correct queries, secure RLS policies, and working auth instead of guessing.

Agent Skills are folders of instructions, scripts, and resources that an agent discovers and loads only when a task is relevant. These follow the open Agent Skills standard and work across 18+ agents, including Claude Code, GitHub Copilot, Cursor, and Cline.

What is Supabase Agent Skills?

It is a GitHub-hosted collection (supabase/agent-skills) maintained by Supabase. Each skill ships a SKILL.md manifest plus reference files the agent reads on demand. Once installed, the skill activates automatically when the agent detects a matching task — no prompting required.

What it includes

• The supabase skill — covers every Supabase product and integration: Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, and Queues. It also covers the client libraries (supabase-js, @supabase/ssr) and SSR integrations for Next.js, React, SvelteKit, Astro, and Remix, plus the Supabase CLI and MCP server.
• The supabase-postgres-best-practices skill — Postgres performance guidelines across 8 categories prioritized by impact: Query Performance, Connection Management, Schema Design, Concurrency & Locking, Security & RLS, Data Access Patterns, Monitoring & Diagnostics, and Advanced Features.

How it works

Install with the skills CLI or as a Claude Code plugin. The agent then loads the relevant skill when you ask it to, for example, optimize a query, design a schema, add indexes, or wire up Auth with Next.js. Because the instructions live in the skill rather than the model's training data, the guidance stays current with Supabase's recommended practices.

Who it's for

Developers using AI agents to build on Supabase — from a first Next.js + Supabase auth flow to production Postgres tuning. It is especially useful for teams who want their agent to follow Supabase's own recommendations on Row-Level Security, migrations, connection pooling, and schema design rather than generic, often-outdated patterns.

What you can build

• Authenticated apps with supabase-js and @supabase/ssr that handle sessions, JWTs, and cookies correctly
• Performant schemas with the right indexes, RLS policies, and access patterns
• Edge Functions, Realtime channels, Storage flows, and pgvector-powered search
• Database migrations and security audits driven by your agent

Why it matters

AI agents frequently produce Supabase code that compiles but is subtly wrong — misusing getSession vs getUser, shipping insecure RLS, or writing N+1 queries. These official skills encode Supabase's correct, current practices so your agent gets it right the first time. The repo is MIT-licensed and actively maintained by Supabase.

Install all skills

npx skills add supabase/agent-skills

Install a specific skill

npx skills add supabase/agent-skills --skill supabase
npx skills add supabase/agent-skills --skill supabase-postgres-best-practices

Claude Code plugin

# 1. Add the Supabase skills marketplace
claude plugin marketplace add supabase/agent-skills

# 2. Install the plugin you want
claude plugin install supabase@supabase-agent-skills
claude plugin install postgres-best-practices@supabase-agent-skills

Skills are available automatically once installed — the agent uses them when a relevant task is detected. See the Supabase AI Skills docs for full instructions.