supabase-fix-rls

Fix an RLS issue on Supabase: $ARGUMENTS

$ARGUMENTS may include any of:

• A finding pasted from the supabase-security-audit report (free-form OK)
• A table name (e.g. corpus_bindings) → diagnose then offer fixes
• An issue tag — rls_disabled, no_policies, overly_permissive, missing_tenant_scope, anon_writes, excess_grants
• --project=<ref> to target a non-default project
• --dry-run → produce the migration SQL but never call apply_migration
• --apply → still requires an explicit "apply" confirmation in chat; just signals intent
• all → walk every advisory of the relevant categories returned by mcp__supabase__get_advisors

Empty input ⇒ fetch advisories + ask the operator which finding to remediate first.

Pairing

This skill is the write companion to supabase-security-audit. The audit identifies issues; this skill drafts and applies the fix. Always re-verify the finding here before fixing — audits get stale fast on a live DB.