← Back to Skills Marketplace
164
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install supabase-manager
Description
Manage Supabase projects from the command line. Query tables, insert/update/delete rows, manage RLS policies, handle auth users, and work with storage. Use w...
Usage Guidance
This skill appears to do what it says (uses the Supabase REST API via anon key), but there are two things to confirm before using it: (1) fix the mismatch between the registry metadata and SKILL.md — the skill should declare SUPABASE_URL and SUPABASE_ANON_KEY in the registry if they are required; (2) clarify credential persistence — resolve the contradiction about storing credentials to disk vs not storing them. Do NOT provide a Supabase service_role key to this skill; if you are uncomfortable handing the anon key directly, consider creating a temporary/anonymized test project with strict RLS policies for evaluation. If the author cannot clarify these points, treat the skill as untrusted and avoid supplying real keys or sensitive data.
Capability Analysis
Type: OpenClaw Skill
Name: supabase-manager
Version: 1.0.2
The 'supabase-manager' skill is a legitimate tool for interacting with Supabase projects via their REST API. It uses standard `curl` commands and environment variables for credentials, specifically emphasizing the use of the public `anon` key to ensure Row Level Security (RLS) is enforced. The instructions in SKILL.md include safety measures such as requiring user confirmation for DELETE/UPDATE operations and limiting output size, with no evidence of malicious intent, data exfiltration, or obfuscation.
Capability Assessment
Purpose & Capability
The SKILL.md describes a Supabase manager that only needs SUPABASE_URL and SUPABASE_ANON_KEY (anon key) which is appropriate for the stated functionality. However, the registry metadata claims no required env vars while the SKILL.md requires two — this mismatch between declared requirements and the runtime instructions is a red flag (could be packaging omission or mis-declaration).
Instruction Scope
Instructions are scoped to Supabase REST and RPC calls via curl/jq and include sensible safeguards (confirm before DELETE/UPDATE, use anon key, RLS-aware). However the SKILL.md contains contradictory statements: it both says 'This skill does NOT store credentials to disk' and later says 'Store config locally — never send keys to external services.' That conflict expands the agent's discretion about persisting secrets and should be resolved.
Install Mechanism
No install spec and no code files — the skill is instruction-only and runs curl commands at runtime. That is the lowest installation risk surface (nothing is written or downloaded by an installer).
Credentials
Only the anon/public key and project URL are requested in SKILL.md, which is proportionate for a client-side Supabase helper. The manifest/registry not declaring required env vars is inconsistent with the SKILL.md and should be corrected. The skill explicitly forbids requesting the service_role key — follow that guidance and never provide a service role key to this skill.
Persistence & Privilege
The skill's instructions are ambiguous about persistence: one section says credentials are not stored, another tells to 'Store config locally'. This ambiguity creates uncertainty about whether secrets or config might be written to disk. The skill does not request always:true and has no install-time persistence declared, but the conflicting guidance warrants clarification before granting environment variables.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install supabase-manager - After installation, invoke the skill by name or use
/supabase-manager - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Added an explicit env section to SKILL.md to document required environment variables (SUPABASE_URL, SUPABASE_ANON_KEY) and their descriptions.
- No changes to functionality; documentation only.
v1.0.1
**Changelog for supabase-manager v1.0.1**
- Now uses only the Supabase anon key for all operations, enhancing security
- Credentials are supplied at runtime via environment variables instead of being stored on disk
- No longer requests, stores, or uses the Supabase service role key
- All queries are performed through Supabase RLS — cannot bypass project security policies
- Updated documentation to reflect credential handling and safer default behavior
v1.0.0
Initial release of supabase-manager.
- Manage Supabase projects directly from the command line using REST API and SQL.
- Supports querying, inserting, updating, and deleting table rows.
- Includes commands for user management, RLS policies, auth, and storage buckets.
- Local config storage for Supabase project connection data; prompts for keys on first use.
- All API interactions use curl; results are formatted as markdown tables.
- Safety features: explicit confirmation required before update/delete; never expose service keys.
Metadata
Frequently Asked Questions
What is Supabase Manager?
Manage Supabase projects from the command line. Query tables, insert/update/delete rows, manage RLS policies, handle auth users, and work with storage. Use w... It is an AI Agent Skill for Claude Code / OpenClaw, with 164 downloads so far.
How do I install Supabase Manager?
Run "/install supabase-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Supabase Manager free?
Yes, Supabase Manager is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Supabase Manager support?
Supabase Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Supabase Manager?
It is built and maintained by Ha Le (@vanthienha199); the current version is v1.0.2.
More Skills