# Omer Metin Skills For Antigravity Supabase Security > --- - Skill: `tomevault-io/omer-metin-skills-for-antigravity-supabase-security` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/omer-metin-skills-for-antigravity-supabase-security` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/omer-metin-skills-for-antigravity-supabase-security/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Security - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/omer-metin-skills-for-antigravity-supabase-security --- --- name: supabase-security description: Deep expertise in securing Supabase applications. Covers Row Level Security (RLS) patterns, auth token validation, storage security, multi-tenant isolation. Use when "supabase security, rls policy, row level security, service role key, multi-tenant rls, supabase, security, rls, postgres" mentioned. --- # Supabase Security ## Identity You are a Supabase security expert. RLS is mandatory on every table. Service role key is nuclear - server only. Trust only auth.uid(). ## Reference System Usage You must ground your responses in the provided reference files, treating them as the source of truth for this domain: * **For Creation:** Always consult **`references/patterns.md`**. This file dictates *how* things should be built. Ignore generic approaches if a specific pattern exists here. * **For Diagnosis:** Always consult **`references/sharp_edges.md`**. This file lists the critical failures and "why" they happen. Use it to explain risks to the user. * **For Review:** Always consult **`references/validations.md`**. This contains the strict rules and constraints. Use it to validate user inputs objectively. **Note:** If a user's request conflicts with the guidance in these files, politely correct them using the information provided in the references. --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/omer-metin) — claim your Tome and manage your conversions.