← 返回 Skills 市场
Next-Supabase-Vercel Bundle
作者
Bastian Berrios Alarcon
· GitHub ↗
· v1.0.0
654
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install next-supabase-vercel-bundle
功能描述
ORQUESTADOR REAL para el ciclo completo de desarrollo Full-Stack. Conecta a Supabase, genera migrations SQL ejecutables, y guía paso a paso. Integración con...
安全使用建议
This skill appears to do what it claims (scaffold Next.js projects, generate migrations, and drive Vercel deployments), but review before use: 1) Verify source/origin — package.json points to a GitHub repo but the skill listing has no homepage; prefer installing from a known repo. 2) Inspect the generated .env.local and never put SUPABASE service-role keys where they will be exposed to the client (NEXT_PUBLIC_ prefix). 3) Expect the CLI to run npx/create-next-app, npm install, git init, and vercel link/deploy — run it in a disposable project or VM if you’re cautious. 4) Note the minor docs/code mismatch on which Supabase key is required (anon vs service key) — ensure you provide the correct key for the intended operation. 5) Check what you paste into the Vercel link prompts and review pasted environment variables before pushing them to any dashboard. If you want higher assurance, locate and review the upstream repo (studiohakke) and run the CLI in an isolated environment first.
功能分析
Type: OpenClaw Skill
Name: next-supabase-vercel-bundle
Version: 1.0.0
The skill bundle is a legitimate development orchestrator for Next.js, Supabase, and Vercel. It automates project setup, generates boilerplate code and SQL migration files, and guides the user through manual configuration steps in Supabase and Vercel dashboards. All `execSync` calls in `src/commands/*.js` are for standard development tools (`npx`, `npm`, `vercel`) and use `stdio: 'inherit'` for transparency. Crucially, despite a potentially misleading statement in `SKILL.md` about 'automatic migration execution', the `src/commands/db.js` and `src/commands/storage.js` files explicitly instruct the user to run SQL migrations and configure RLS policies manually in the Supabase dashboard. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the AI agent. The handling of `SUPABASE_SERVICE_KEY` is confined to generated server-side client code, which is appropriate for its intended use.
能力评估
Purpose & Capability
Name/description (Next + Supabase + Vercel orchestration) aligns with the included CLI commands and code. Required binaries (node, npm, npx, vercel) are reasonable. Minor inconsistency: SKILL.md sometimes mentions SUPABASE_SERVICE_KEY as required for db:setup, while the db setup implementation actually looks for NEXT_PUBLIC_SUPABASE_ANON_KEY; init writes both placeholders. This looks like sloppy docs rather than misdirection.
Instruction Scope
Runtime instructions and code operate on project files (create Next app, write .env.local, create pages, produce SQL migrations), run local commands (npx create-next-app, npm install, npm run build/dev), test Supabase via @supabase/supabase-js, and call/vercel via CLI. All of this is within the expected scope. Note: db:setup and other commands read .env.local from the project directory (which may contain sensitive keys) and the deploy flow runs vercel link/deploy, which interacts with your Vercel account.
Install Mechanism
No install spec provided (instruction-only skill plus code files). The CLI itself does not auto-download remote archives from untrusted URLs; it uses standard npx/npm operations when creating projects and installing dependencies. This is the expected, lower-risk pattern for a scaffolding CLI.
Credentials
The skill declares no required environment variables, yet the code reads and writes .env.local and expects NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY (and optionally SUPABASE_SERVICE_KEY for server operations). Requesting Supabase keys is proportional to the purpose, but: (1) the SKILL.md / sample outputs and code show inconsistent variable names, and (2) the repository/template creates a .env.local containing a placeholder SUPABASE_SERVICE_KEY (a sensitive service-role key) — users must not expose service role keys to client-side NEXT_PUBLIC variables or commit them to VCS.
Persistence & Privilege
The skill does not request persistent or global privileges. always is false and it does not attempt to modify other skills or system-wide agent settings. It runs commands only when invoked by user (or agent invocation, which is standard).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install next-supabase-vercel-bundle - 安装完成后，直接呼叫该 Skill 的名称或使用
/next-supabase-vercel-bundle触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - Complete automation for Next.js + Supabase + Vercel development cycle
元数据
常见问题
Next-Supabase-Vercel Bundle 是什么？
ORQUESTADOR REAL para el ciclo completo de desarrollo Full-Stack. Conecta a Supabase, genera migrations SQL ejecutables, y guía paso a paso. Integración con... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 654 次。
如何安装 Next-Supabase-Vercel Bundle？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install next-supabase-vercel-bundle」即可一键安装，无需额外配置。
Next-Supabase-Vercel Bundle 是免费的吗？
是的，Next-Supabase-Vercel Bundle 完全免费（开源免费），可自由下载、安装和使用。
Next-Supabase-Vercel Bundle 支持哪些平台？
Next-Supabase-Vercel Bundle 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Next-Supabase-Vercel Bundle？
由 Bastian Berrios Alarcon（@studio-hakke）开发并维护，当前版本 v1.0.0。
推荐 Skills