← All skills
supabase-production
82 / 100 · Low risk
Fine to try.
By phuryn/product-engineering (GitHub) · other · 427 stars · scanned at commit 061014f
A Supabase query, RPC or migration, 'db push', 'supabase link', RLS or grants, a Supabase error: server-only keys, deny-all RLS, migrations via the CLI.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 22 places.
Show 17 more
- app-stack/skills/supabase-production/SKILL.md, line 76
( . <development operator file> && case "$DEV_DB_URL" in *<dev-ref>*) ;; *) false ;; esac && npx supabase db push --db-url "$DEV_DB_URL" && npx supabase migrati - app-stack/skills/supabase-production/SKILL.md, line 82
npx supabase migration list --db-url "$PROD_DB_URL" && npx supabase db push --db-url "$PROD_DB_URL" --dry-run - app-stack/skills/supabase-production/SKILL.md, line 88
npx supabase db push --db-url "$PROD_DB_URL" && npx supabase migration list --db-url "$PROD_DB_URL" - app-stack/skills/supabase-production/SKILL.md, line 102
**Read production's migration ledger before every promotion.** Run `npx supabase migration list --db-url "$PROD_DB_URL"`, loading the production operator file i - app-stack/skills/supabase-production/references/access-model.md, line 121
npx supabase db query --db-url "$DEV_DB_URL" --file <query.sql> --output-format json - app-stack/skills/supabase-production/references/gotchas.md, line 15
- `npx supabase` can fail on npm's install-script policy - app-stack/skills/supabase-production/references/gotchas.md, line 93
## `npx supabase` can fail on npm's install-script policy - app-stack/skills/supabase-production/references/gotchas.md, line 95
A Supabase CLI older than 2.99.0 installs its binary in a postinstall script, which npm 12 blocks by default and npm 11.16 and later can be set to block (`stric - app-stack/skills/supabase-production/references/gotchas.md, line 108
**SSL enforcement is off by default** (Supabase's docs, read 2026-10-25; `npx supabase ssl-enforcement get --project-ref <ref> --experimental`). So Postgres als - app-stack/skills/supabase-production/references/migrations.md, line 30
( . <development operator file> && case "$DEV_DB_URL" in *<dev-ref>*) ;; *) false ;; esac && npx supabase migration list --db-url "$DEV_DB_URL" && npx supabase - app-stack/skills/supabase-production/references/migrations.md, line 36
( . <development operator file> && case "$DEV_DB_URL" in *<dev-ref>*) ;; *) false ;; esac && npx supabase db push --db-url "$DEV_DB_URL" && npx supabase migrati - app-stack/skills/supabase-production/references/migrations.md, line 44
npx supabase migration list --db-url "$PROD_DB_URL" && npx supabase db push --db-url "$PROD_DB_URL" --dry-run - app-stack/skills/supabase-production/references/migrations.md, line 50
npx supabase db push --db-url "$PROD_DB_URL" && npx supabase migration list --db-url "$PROD_DB_URL" - app-stack/skills/supabase-production/references/migrations.md, line 70
- **CLI 3.0.0 (published `2026-11-02`) moves the flags.** It deprecates `--db-url` and `--linked` for `--remote=<url>` (or `--remote=<ref>`), to be removed in v - app-stack/skills/supabase-production/references/migrations.md, line 101
1. The owner reads the production project's branches, in the dashboard or with `npx supabase branches list --project-ref <prod-ref>` on a time-boxed read-only p - app-stack/skills/supabase-production/references/migrations.md, line 140
- **`npx supabase migration list --db-url "$PROD_DB_URL"` shows no row with an empty `remote`** (every production command here runs with the string loaded from - app-stack/skills/supabase-production/references/migrations.md, line 141
1. `npx supabase db push --db-url "$PROD_DB_URL" --dry-run` names the pending rows.
and 2 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README.
Found in 4 places.
Show 1 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'supabase-production' ] || [ -L ~/.agents/skills/'supabase-production' ]; then echo 'A skill folder named supabase-production already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/phuryn/product-engineering' "$d" && git -C "$d" checkout --quiet '061014ffe954b4dca1f108de614ce25e4607161e' -- 'app-stack/skills/supabase-production' && mkdir -p ~/.agents/skills && cp -R "$d"/'app-stack/skills/supabase-production' ~/.agents/skills/'supabase-production' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'supabase-production' ~/.claude/skills/'supabase-production' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for phuryn/product-engineering shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/phuryn/product-engineering/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | 061014f | 82 |