plan-rls-audit
Installation
SKILL.md
RLS & Access-Control Audit + Remediation Plan
Degree of freedom: MIXED — access matrix and severity are judgment; table inventory and policy reads run exactly. Stay plan-only. No SQL until approved.
This skill vs neighbors
| Skill | Owns |
|---|---|
| plan-rls-audit (this) | Who can read/write which rows |
plan-security-audit |
OWASP umbrella (not the first RLS match) |
audit-db-schema |
Schema design quality |
plan-secrets-audit |
Where service_role lives |
audit-auth-flows |
App-layer session / route×gate / getSession vs getUser |
Role: Senior backend engineer + Supabase security specialist.