🛡️ Supabase RLS Doctor

Name: 🛡️ Supabase RLS Doctor
Price: 19 USD
Availability: InStock
Author: Agensi

It moves beyond basic linting by performing an evidence-first audit of your Row Level Security (RLS) policies, storage rules, and client-side initialization logic.

$19

30-day refund guarantee

Secure checkout via Stripe

0 installsSecurity scanned

See it in action

You say

Audit my Supabase migrations and check if any of my tables are accidentally exposed to public users without proper RLS.

Your agent does

Confirmed Findings

Severity: CRITICAL
Issue: RLS not enabled on profiles table.
Evidence: migrations/01_init.sql line 42.
Impact: Any user can read/write all profile data.
Fix: ALTER TABLE profiles ENABLE ROW LEVEL SECURITY;
Verification: Run scan_rls tool.

What you get

Identify tables with missing or disabled Row Level Security (RLS)Detect leaked service role keys in frontend application codeAudit Supabase Storage buckets for insecure public access rulesGenerate safe SQL remediation scripts for high-risk policy flawsVerify auth.uid() constraints are correctly implemented for multi-tenancy

About this skill

Deep Security Audits for Supabase Projects

The Supabase RLS Doctor is a specialized security skill designed to identify critical data exposure risks in your Supabase infrastructure. It moves beyond basic linting by performing an evidence-first audit of your Row Level Security (RLS) policies, storage rules, and client-side initialization logic.

What it does

Identifies public table exposure and unsafe 'anonymous' access policies.
Detects service role key leakage and frontend/backend boundary mistakes.
Audits Supabase Storage bucket rules for unauthorized file access.
Flags missing auth.uid() constraints and overbroad SQL grants.
Analyzes migration drift and tenant ownership rules for multi-tenant apps.

Why use this skill

Unlike generic AI prompts, this skill uses a structured, multi-step workflow. It leverages internal heuristic scanners and a comprehensive audit checklist to ensure no stone is left unturned. It doesn't just guess; it ranks findings by severity (Critical to Info), cites exact lines of code as evidence, and provides copy-pasteable remediation snippets that are safe to apply.

Supported Inputs

SQL Migrations and Policy files
Supabase Client initialization code
Database schema snapshots
Storage policy configurations

How to install

Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

Reviews

No reviews yet

Be one of the first to try it. Every listed skill passes our trust checks below.

Security scanned

Passed our 8-point scan before listing

Fresh listing

Recently published to Agensi

30-day refund

Not a fit? Get your money back

Trust & safety

Security scanned

Verified clean 1 month ago

30-day refund guarantee
One-time purchase, yours forever
Secure checkout via Stripe

Listed1 month ago

Creator

JustHandled Labs

JustHandled Labs builds focused agent skills for the work nobody wants to do by hand. Each one is a single repeatable job done well: catching the security and data mistakes that quietly ship, keeping docs and tests honest, gating the commands an agent is about to run, sharpening writing, and handling the founder chores around launches, outreach, and brand setup. Not generic AI productivity. Specific workflows that are easy to run, review, and repeat. Maintained by H.J. Westerfield, with a background in communications, editing, project coordination, customer support, and practical AI systems. Tools for people who want useful automation without theatrical complexity.