← 返回 Skills 市场
164
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install supabase-manager
功能描述
Manage Supabase projects from the command line. Query tables, insert/update/delete rows, manage RLS policies, handle auth users, and work with storage. Use w...
安全使用建议
This skill appears to do what it says (uses the Supabase REST API via anon key), but there are two things to confirm before using it: (1) fix the mismatch between the registry metadata and SKILL.md — the skill should declare SUPABASE_URL and SUPABASE_ANON_KEY in the registry if they are required; (2) clarify credential persistence — resolve the contradiction about storing credentials to disk vs not storing them. Do NOT provide a Supabase service_role key to this skill; if you are uncomfortable handing the anon key directly, consider creating a temporary/anonymized test project with strict RLS policies for evaluation. If the author cannot clarify these points, treat the skill as untrusted and avoid supplying real keys or sensitive data.
功能分析
Type: OpenClaw Skill
Name: supabase-manager
Version: 1.0.2
The 'supabase-manager' skill is a legitimate tool for interacting with Supabase projects via their REST API. It uses standard `curl` commands and environment variables for credentials, specifically emphasizing the use of the public `anon` key to ensure Row Level Security (RLS) is enforced. The instructions in SKILL.md include safety measures such as requiring user confirmation for DELETE/UPDATE operations and limiting output size, with no evidence of malicious intent, data exfiltration, or obfuscation.
能力评估
Purpose & Capability
The SKILL.md describes a Supabase manager that only needs SUPABASE_URL and SUPABASE_ANON_KEY (anon key) which is appropriate for the stated functionality. However, the registry metadata claims no required env vars while the SKILL.md requires two — this mismatch between declared requirements and the runtime instructions is a red flag (could be packaging omission or mis-declaration).
Instruction Scope
Instructions are scoped to Supabase REST and RPC calls via curl/jq and include sensible safeguards (confirm before DELETE/UPDATE, use anon key, RLS-aware). However the SKILL.md contains contradictory statements: it both says 'This skill does NOT store credentials to disk' and later says 'Store config locally — never send keys to external services.' That conflict expands the agent's discretion about persisting secrets and should be resolved.
Install Mechanism
No install spec and no code files — the skill is instruction-only and runs curl commands at runtime. That is the lowest installation risk surface (nothing is written or downloaded by an installer).
Credentials
Only the anon/public key and project URL are requested in SKILL.md, which is proportionate for a client-side Supabase helper. The manifest/registry not declaring required env vars is inconsistent with the SKILL.md and should be corrected. The skill explicitly forbids requesting the service_role key — follow that guidance and never provide a service role key to this skill.
Persistence & Privilege
The skill's instructions are ambiguous about persistence: one section says credentials are not stored, another tells to 'Store config locally'. This ambiguity creates uncertainty about whether secrets or config might be written to disk. The skill does not request always:true and has no install-time persistence declared, but the conflicting guidance warrants clarification before granting environment variables.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install supabase-manager - 安装完成后，直接呼叫该 Skill 的名称或使用
/supabase-manager触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- Added an explicit env section to SKILL.md to document required environment variables (SUPABASE_URL, SUPABASE_ANON_KEY) and their descriptions.
- No changes to functionality; documentation only.
v1.0.1
**Changelog for supabase-manager v1.0.1**
- Now uses only the Supabase anon key for all operations, enhancing security
- Credentials are supplied at runtime via environment variables instead of being stored on disk
- No longer requests, stores, or uses the Supabase service role key
- All queries are performed through Supabase RLS — cannot bypass project security policies
- Updated documentation to reflect credential handling and safer default behavior
v1.0.0
Initial release of supabase-manager.
- Manage Supabase projects directly from the command line using REST API and SQL.
- Supports querying, inserting, updating, and deleting table rows.
- Includes commands for user management, RLS policies, auth, and storage buckets.
- Local config storage for Supabase project connection data; prompts for keys on first use.
- All API interactions use curl; results are formatted as markdown tables.
- Safety features: explicit confirmation required before update/delete; never expose service keys.
元数据
常见问题
Supabase Manager 是什么？
Manage Supabase projects from the command line. Query tables, insert/update/delete rows, manage RLS policies, handle auth users, and work with storage. Use w... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 164 次。
如何安装 Supabase Manager？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install supabase-manager」即可一键安装，无需额外配置。
Supabase Manager 是免费的吗？
是的，Supabase Manager 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Supabase Manager 支持哪些平台？
Supabase Manager 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Supabase Manager？
由 Ha Le（@vanthienha199）开发并维护，当前版本 v1.0.2。
推荐 Skills