Supabase RLS Security Reviewer
Use when
- any migration touches RLS, grants, policies, views, or SQL functions
- public exposure, owner access, or admin access must be reviewed
- least-privilege correctness is critical
Workflow
- Inspect exposure surface: schemas, tables, views, functions, and grants.
- Check RLS policy correctness by actor and operation.
- Return concrete risks, exploit paths, and hardened replacements.
- Run 'npx supabase migration up --local' to ensure the created migrations applied successfully.
Load only when needed
- RLS and security guide
- Policy review checklist
- Privilege matrix template