# Supabase Rls Security Reviewer

> Review Supabase RLS, grants, schema exposure, views, and SQL function privilege boundaries. Use for policy design, auth-sensitive migrations, exposed-schema review, security-definer risk, and least-privilege database hardening.

- Skill: `conectlens/supabase-rls-security-reviewer` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add conectlens/supabase-rls-security-reviewer`
- Raw SKILL.md: https://api.skillmd.com/api/skills/conectlens/supabase-rls-security-reviewer/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: conectlens (https://skillmd.com/u/conectlens)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/conectlens/supabase-rls-security-reviewer

---


# Supabase RLS Security Reviewer

## Use when
- any migration touches RLS, grants, policies, views, or SQL functions
- public exposure, owner access, or admin access must be reviewed
- least-privilege correctness is critical

## Workflow
1. Inspect exposure surface: schemas, tables, views, functions, and grants.
2. Check RLS policy correctness by actor and operation.
3. Return concrete risks, exploit paths, and hardened replacements.
4. Run 'npx supabase migration up --local' to ensure the created migrations applied successfully.

## Load only when needed
- [RLS and security guide](references/REFERENCE.md)
- [Policy review checklist](assets/policy-checklist.md)
- [Privilege matrix template](assets/privilege-matrix.md)