--- title: "Supabase Postgres Best Practices: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/supabase-supabase-postgres-best-practices/ description: "Connects Postgres schema and query decisions to worked SQL examples, connection guidance and row-level security checks." --- # Supabase Postgres Best Practices: review, setup & limitations · Undominated.ai > Connects Postgres schema and query decisions to worked SQL examples, connection guidance and row-level security checks. [← Explore all skills](/skills/) DATABASES / Supabase # Supabase Postgres Best Practices Connects Postgres schema and query decisions to worked SQL examples, connection guidance and row-level security checks. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 7 linked sources Publisher Supabase Licence MIT ↗ Revision 8331f9108451 Read what was—and wasn’t—checked ↓ “Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating” Supabase · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Pairs incorrect and corrected SQL with query-plan examples instead of offering only generic database advice. - Treats row-level security, privileges and connection management as part of database work rather than a separate performance afterthought. ### A good fit for - Reviewing a Postgres migration or slow query - Checking tenant-isolation policies and supporting indexes ### Weigh up before choosing - Illustrative speedups and blanket indexing rules are not measurements of your workload; inspect actual plans and write costs. - Security-definer and RLS examples require privilege-aware adaptation and tests against the target schema. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - skills/supabase-postgres-best-practices/SKILL.md - skills/supabase-postgres-best-practices/references/query-missing-indexes.md - skills/supabase-postgres-best-practices/references/security-rls-performance.md - LICENSE ### Our findings - The definition routes work to named rules for queries, connections, schema, locking and RLS. - The inspected missing-index rule contrasts sequential and index scans using a concrete WHERE/JOIN example. - The RLS reference warns that security-definer functions bypass table policies and calls for caller checks, a non-exposed schema and restricted execution. ### Not established by this review - No SQL was executed against a database. - Workload performance and tenant-isolation behavior were not measured. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. Upstream setup instructions ↗ DOCUMENTED COMMAND npx skills add https://github.com/supabase/agent-skills/tree/8331f910845103c08d51f6ca1d86ebb7d1f745e3/skills/supabase-postgres-best-practices Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - Install the complete skill directory with its references and helpers; a copied SKILL.md alone may be incomplete. - Choose the intended agent and project scope in the installer, then review its permissions before using the skill. ### Before you start - Node.js/npm for this installer - An agent that supports the Agent Skills format - Access to the relevant schema and query plans; database credentials only if you choose to run checks ### Compatibility Agent Skills-compatible coding agents · PostgreSQL; Supabase-specific examples are identified ### Database files; optional database access - Read schema, SQL and query plans - Write migration or policy files when authorized - Executing suggested SQL can create indexes or alter permissions ### Cost model The instruction package is MIT-licensed; database hosting, query execution and agent usage have their own costs. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Skill definition at reviewed revision ↗ Checked 2026-09-21 https://github.com/supabase/agent-skills/blob/8331f910845103c08d51f6ca1d86ebb7d1f745e3/skills/supabase-postgres-best-practices/SKILL.md Supports: summary, upstreamDescription, whySelected, bestFor, limitations, review, compatibility, access - Reviewed reference or helper: references/query-missing-indexes.md ↗ Checked 2026-09-21 https://github.com/supabase/agent-skills/blob/8331f910845103c08d51f6ca1d86ebb7d1f745e3/skills/supabase-postgres-best-practices/references/query-missing-indexes.md Supports: review, limitations, access - Reviewed reference or helper: references/security-rls-performance.md ↗ Checked 2026-09-21 https://github.com/supabase/agent-skills/blob/8331f910845103c08d51f6ca1d86ebb7d1f745e3/skills/supabase-postgres-best-practices/references/security-rls-performance.md Supports: review, limitations, access - Upstream license or licensing declaration ↗ Checked 2026-09-21 https://github.com/supabase/agent-skills/blob/8331f910845103c08d51f6ca1d86ebb7d1f745e3/LICENSE Supports: license - Publisher installation and project documentation ↗ Checked 2026-09-21 https://github.com/supabase/agent-skills/blob/8331f910845103c08d51f6ca1d86ebb7d1f745e3/README.md Supports: install, compatibility, access - Skills installer source formats and selective installation ↗ Checked 2026-09-21 https://github.com/vercel-labs/skills/blob/7407f3893ad4dceab546ac002c3ef806e4000c73/README.md Supports: install - Installer implementation: full commit SHA fallback ↗ Checked 2026-09-21 https://github.com/vercel-labs/skills/blob/7407f3893ad4dceab546ac002c3ef806e4000c73/src/git.ts Supports: install KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### dbt Documentation Maintenance ↗ Audits descriptions in a dbt manifest and drafts missing model or column documentation in the project’s existing style.](/skills/dbt-labs-maintaining-dbt-documentation/)[### OpenAI Data Analytics Notebooks ↗ Turns SQL or Python analysis into a traceable notebook whose conclusions are tied to executed outputs and stated assumptions.](/skills/openai-jupyter-notebooks/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)