# Treido Audit Supabase

> Read-only Supabase auditor for Treido (schema/migrations/RLS + query hot paths). Returns structured payload for ORCH merge. Trigger: SUPABASE-AUDIT

- Skill: `majiayu000/treido-audit-supabase` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/treido-audit-supabase`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/treido-audit-supabase/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/treido-audit-supabase

---


# Treido Supabase Auditor (Read-only)

Read-only specialist. Do not patch files. Do not edit `TASKS.md`.
Contract: `.claude/skills/treido-orchestrator/references/audit-payload.md`

## Focus (Treido)

- RLS policies exist and are scoped correctly (no accidental public writes).
- Schema changes via migrations (no ad-hoc DDL).
- Hot paths: no `select('*')`; project fields; paginate.

## Audit Steps (Read-only)

```bash
ls supabase/migrations
rg -n "row level security|create policy|alter policy|drop policy" supabase/migrations
rg -n "select\\(\\s*\\*\\s*\\)" app lib --glob '*.ts' --glob '*.tsx'
```

## Output (Required)

- Header: `## SUPABASE`
- IDs: `SUPABASE-001`, `SUPABASE-002`, ...
- Include acceptance checks: “no select(*) in hot paths” + “schema/RLS changes represented as migrations”