supabase
SkillDatabases & dataManage Supabase local and hosted infrastructure. Migrations, schema diff, status, reset, push, and inspection. Wraps the Supabase CLI with project-specific context and gotcha avoidance.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the supabase skill
What this skill tells your AI
The instructions your AI receives, as published by kastalien-research/thoughtbox in .agents/skills/supabase/SKILL.md and read by ahel’s review.
Manage Supabase: $ARGUMENTS
Project Context
- Linked project: Thoughtbox (
akjccuoncxlvrrtkvtno, West US Oregon) - Local DB URL:
postgresql://postgres:postgres@127.0.0.1:54322/postgres - Migrations dir:
supabase/migrations/ - Config:
supabase/config.toml
Commands
Parse the first word of $ARGUMENTS to determine the command:
status — Show local and hosted state
- Run
supabase statusfor local container health - Run
supabase migration listto show local vs remote migration drift - Report: which migrations are local-only, remote-only, or synced
migrate — Create a new migration
Parse remaining arguments for the migration name.
- Run
supabase migration new <name>to create the file - Open the created file path for editing
- Remind: after writing SQL, run
/supabase diffto verify, then/supabase pushto deploy
diff — Diff local schema against migrations
- Run
supabase db diffto show schema changes not captured in migrations - If changes exist, offer to create a migration capturing them
- If clean, report "Schema in sync with migrations"
push — Push migrations to hosted project
- Run
supabase migration listto show what will be pushed - List the pending migrations and their filenames
- Ask for confirmation before proceeding — this modifies the hosted database
- Run
supabase db pushto apply - Run
supabase migration listagain to confirm sync
pull — Pull remote schema to local migrations
- Run
supabase db pullto generate a migration from remote schema changes - Show the generated migration file
- Remind: review the SQL before committing
reset — Reset local database to migrations
- Confirm the user wants to destroy local data
- Run
supabase db resetto drop and re-apply all migrations - Report success and migration count
inspect — Inspect hosted database
Parse remaining arguments for the inspection type. Default to db-stats.
Available inspections:
db-stats— Size, cache hit rates, WAL sizetable-stats— Table sizes and row countsindex-stats— Index usage and bloatoutliers— Slowest querieslocks— Active locksbloat— Table and index bloat estimatesrole-stats— Role information
Run: supabase inspect db <type> --linked
link — Link or re-link to hosted project
- Run
supabase link --project-ref akjccuoncxlvrrtkvtno - Run
supabase servicesto verify version alignment - Report any version mismatches between local and remote
Gotchas (learned from experience)
| Gotcha | Detail |
|---|---|
| PG version mismatch | CLI upgrades can change local PG version (e.g., 15→17). Old volumes fail with "incompatible data directory". Fix: supabase stop --no-backup, remove volume, supabase start. |
--linked flag inconsistency | Some commands use --linked (e.g., inspect db), others don't support it (e.g., db execute, status). Check --help before assuming. |
| Migration ordering | Migrations sort lexicographically by filename. Use YYYYMMDDHHMMSS_ prefix (supabase CLI does this automatically with migration new). |
| RLS policies | New tables have RLS enabled by default. Forgetting policies means zero rows returned, not errors. Always add policies in the same migration that creates the table. |
db push is irreversible | There is no db unpush. Test migrations locally with db reset first. |
| Service role vs anon key | Admin operations (user management, bypassing RLS) require the service_role key, not the anon/publishable key. Never expose service_role client-side. |
| Local vs hosted auth | Local auth (GoTrue) has different rate limits and email config than hosted. Test auth flows against hosted before shipping. |
Candidate Slash Commands
These are composable building blocks for workflows:
| Command | Purpose | Implementation |
|---|---|---|
/sb-status | Quick health check | supabase status && supabase migration list |
/sb-new-migration | Create + open migration | supabase migration new <name> then open file |
/sb-sync-check | Drift detection | supabase migration list + diff analysis |
/sb-reset-local | Clean slate local DB | supabase db reset with confirmation |
/sb-push | Deploy migrations | supabase db push with pre-flight check |
Candidate Hooks
These can be wired into .Codex/settings.json:
| Event | Hook | Purpose |
|---|---|---|
PreToolUse:Bash | Guard supabase db push | Require confirmation before pushing to hosted |
PostToolUse:Write | Auto-lint on supabase/migrations/*.sql | Run supabase db lint after writing migration files |
SessionStart | Migration drift check | Run supabase migration list on session start if supabase dir exists |
PreToolUse:Bash | Block supabase stop --no-backup | Prevent accidental data loss without explicit intent |
Workflow Compositions
New feature with schema changes
/sb-status → /sb-new-migration → [write SQL] → /sb-reset-local → [test] → /sb-push
Debug hosted schema issues
/supabase inspect db-stats → /supabase inspect outliers → /supabase inspect bloat
Sync after pulling remote changes
git pull → /sb-sync-check → /sb-reset-local (if drifted) → [verify]
Output
Always end with a one-line status summary:
Supabase: [local: running|stopped] [migrations: N local, N remote, N pending] [linked: yes|no]
Signals
- GitHub stars
- 64
- Forks
- 20
- Last commit
- Jul 2026
- Hacker News mentions
- 20
ahel review
S4info
community integration — published by kastalien-research, not supabase
Automated review, not a security audit. Ruleset v1.
Advanced
- Catalog kind
- skill
- Gateway key
supabase-kastalien-research- Source
- github.com/kastalien-research/thoughtbox