The Agent Skills Directory

[SAFE]: The analyzed skill consists of instructional SQL scripts and React context code for Supabase development. No malicious behavior, prompt injection, or obfuscation was found.
[COMMAND_EXECUTION]: The skill provides SQL code meant for manual execution by a developer in a database console. These scripts include schema definitions, helper functions, and RLS policies.
[PRIVILEGE_ESCALATION]: The SQL functions get_user_org_id and is_org_admin utilize the SECURITY DEFINER property. This is a standard architectural pattern in Supabase used specifically to prevent RLS recursion when policies need to query the same table. The functions are properly scoped with SET search_path = public and validate access using the built-in auth.uid() function.

supabase-auth-multi-tenant