Loading the repository README…
Showing 40 of 93 collected skills.
Query and write Supabase data with better-supabase's typed repositories, Results and codegen. Use when code imports better-supabase, when adding a table, query or mutation, when a Supabase type is out of date, or after upgrading better-supabase.
Build HTTP APIs, Edge Functions and MCP servers on Supabase with better-supabase adapters. Use when adding a route, REST resource, oRPC procedure, Edge Function, MCP tool, AI chat route, knowledge or memory, stored agent, MCP connector, eve agent, Chat SDK…
Create a new repo or bring an existing one up to the ScaleDock standard (latest Node supported by Vercel, latest pnpm and TypeScript, Next.js or Expo, Supabase with better-supabase, PermDock, oRPC, MCP, CLI, Fumadocs, Vercel). Use when scaffolding a new…
Read and check the caller in better-supabase apps, including sessions, typed claims, user profiles, OAuth clients and agents acting for a user, scopes, ended sessions and authorization providers. Use when code reads auth, session or claims, when adding a…
Test Supabase RLS policies, APIs and SQL against the local stack with better-supabase/testing, typed seeds and pgTAP. Use when writing or fixing tests that touch the database, policies, auth, OAuth or agent scopes, or Temporal time values.
WebMCP: expose web page tools to AI agents via document.modelContext, following the W3C Web Machine Learning Community Group draft (Draft Community Group Report, build posture), and upgrade code from the legacy navigator.modelContext drafts. Use when adding,…
Vercel AI Gateway guidance for setup, model discovery, authentication, routing, fallbacks, virtual models, evaluation models, BYOK, budgets, spend reporting, observability, compatible APIs, and coding-agent configuration. Use when adding AI Gateway to an app,…
Vercel environment variable expert guidance. Use when working with .env files, vercel env commands, Secret or Config variable types, OIDC tokens, or managing environment-specific configuration.
Implement feature flags in Next.js or SvelteKit code with the Flags SDK (`flags` npm package). Use when installing or configuring the SDK, declaring flags with `flag()`, wiring a provider adapter (`@flags-sdk/vercel`, Statsig, LaunchDarkly, PostHog,…
Vercel Connect expert guidance for securely obtaining scoped credentials for third-party services on behalf of apps or users. Use when wiring up provider API access, OAuth, API-key services, MCP servers, triggers, framework adapters, eve agent connections, or…
Vercel Functions expert guidance — Node.js/Bun/Python runtimes, Fluid Compute, long-duration (30 min) functions, large functions (5 GB bundles), Docker/OCI container images, plan limits, streaming, WebSockets, and Cron Jobs. Use when configuring, debugging,…
Vercel Sandbox guidance — ephemeral Firecracker microVMs for running untrusted code safely. Supports AI agents, code generation, and experimentation. Use when executing user-generated or AI-generated code in isolation.
Run untrusted or AI-generated code in ephemeral Firecracker microVMs with @vercel/sandbox. Create a VM, run commands, read/write files, expose ports, snapshot and resume. Use for AI agents, code execution, builds, and isolated experimentation.
Configure and troubleshoot Vercel Services for multiple frontends and backends in one project. Use when composing a polyglot or multi-service application on one Vercel deployment; defining the `services` key, service-targeted rewrites, or service bindings in…
ReUI design and component rules for React apps on shadcn/ui and Tailwind. Use for any UI work in a project with @reui in components.json or a components/reui folder, and in any shadcn project that asks for data grids, kanban boards, dashboards or full pages:…
ReUI design and component rules for React apps on shadcn/ui and Tailwind. Use for any UI work in a project with @reui in components.json or a components/reui folder, and in any shadcn project that asks for data grids, kanban boards, dashboards or full pages:…
EN 301 549: apply the European accessibility requirements for ICT products and services, including web, documents and software. Covers EN 301 549 V4.1.1, EN 301 549 V3.2.1 (supported). Use when applying European ICT accessibility requirements. Triggers: EN…
Section 508: apply the Revised 508 Standards for accessible ICT in US federal agencies. Covers Revised 508 Standards. Use when applying the Revised 508 Standards. Triggers: Section 508.
W3C WebAuthn Level 3: build and verify passkey registration and authentication for relying parties, following the § 7.1 and § 7.2 verification steps. Use when adding, reviewing or upgrading passkeys or security keys on a website or server:…
RateLimit headers: advertise HTTP API quotas, handle 429 with the IETF RateLimit and RateLimit-Policy header fields (draft-11 of draft-ietf-httpapi-ratelimit-headers), Retry-After (RFC 9110) and 429 Too Many Requests (RFC 6585). Use when adding rate limiting…
Build or review a ScaleDock HTTP API that follows HTTP Semantics (RFC 9110, RFC 9111), OpenAPI 3.2, JSON Schema 2020-12, OpenAPI Overlay, RFC 9457 Problem Details, the RateLimit header fields and Standard Schema, with PermDock guarding every procedure and…
Build or harden a ScaleDock MCP server that follows the MCP base protocol and authorization spec, OAuth 2.1, JWT verification and Problem Details, with PermDock deciding every tool call. Use when adding an MCP surface, protecting MCP tools, wiring Protected…
Shared Signals (SSF, CAEP, RISC): send and receive security events between identity providers, apps and services. Targets the SSF 1.0, CAEP 1.0 and RISC 1.0 Finals, and upgrades peers from the Implementer's Drafts (spec_version 1_0-ID1 to 1_0-ID3); no…
SPIFFE: issue and verify workload identities with SPIFFE IDs, X.509-SVIDs, JWT-SVIDs, trust bundles, the Workload API and federation. Use when building or reviewing service-to-service authentication, workload mTLS, workload identity on Kubernetes or VMs, or…
Standard Schema v1: accept any validator via ~standard, and implement or consume the @standard-schema/spec interfaces (StandardSchemaV1, StandardJSONSchemaV1, StandardTypedV1). Covers Standard Schema v1, the only line (package 1.1.0, upgrades from 1.0.0); no…
Use when planning or writing server-side code that uses `@supabase/server` — Edge Functions, Hono apps, webhook handlers, or any backend that creates Supabase clients or validates inbound auth. Trigger **before** writing or modifying any file that imports…
A2A protocol: publish Agent Cards and talk agent to agent over the Agent2Agent (A2A) 1.0 specification from the Linux Foundation, upgrade 0.3 and 0.2 agents to 1.0, and track the A2A 1.1 preview (task generation and timeline). Use when building or reviewing…
AG-UI: stream agent runs to user-facing apps with the Agent-User Interaction Protocol 1.0, upgrade 0.x integrations to 1.0, and track the AG-UI 1.1 working draft. Use when building or reviewing an AG-UI agent endpoint (producer), a client or UI that consumes…
Agent Skills spec 2026-08-04 (agentskills.io): write, review and validate SKILL.md skills, and load them in an agent. Covers the skill folder layout, the SKILL.md frontmatter (name, description, license, compatibility, metadata, allowed-tools) with its length…
AGENTS.md site 2026-03-10 (agents.md): write, place, migrate and review AGENTS.md agent instruction files. The open, unversioned Markdown format for guiding coding agents, stewarded by the Agentic AI Foundation (Linux Foundation). Covers placement (repository…
AP2 Agent Payments Protocol: authorize AI agent payments with signed Checkout and Payment Mandates (SD-JWT verifiable digital credentials), following AP2 v0.2 (current, draft posture build; no preview). Use when building or reviewing a shopping agent,…
AsyncAPI 3.1: describe event-driven and message-based APIs with servers, channels, operations, messages, protocol bindings and security schemes. Covers AsyncAPI 3.1 (current) and 3.0 (supported), and upgrades from 2.x; no 4.0 preview exists. Use when writing,…
AuthZEN Authorization API: PEP-to-PDP access evaluation and search over HTTPS JSON. Use when building or reviewing a Policy Enforcement Point (PEP) that asks a Policy Decision Point (PDP) for access decisions, or a PDP that implements the API: the subject,…
Cedar policy language 4.5: write, validate and evaluate authorization policies with entities, schemas, templates and PARC requests. Targets Cedar 4.x (language 4.5, SDK 4.13.0) and upgrades policies and schemas from Cedar 3.x and 2.x. Use when adding…
CloudEvents 1.0 (1.0.2): describe events in a common format, with context attributes, extensions, the JSON, Avro and Protobuf formats, and the HTTP, Kafka, AMQP, MQTT and NATS bindings, plus upgrades from CloudEvents 0.3. Use when designing event payloads or…
CommonMark: parse and render Markdown by the CommonMark specification. Covers CommonMark 0.31.2. Use when parsing CommonMark. Triggers: CommonMark.
Content Security Policy Level 3: write strict CSP headers, plus the W3C Trusted Types, Permissions Policy and Fetch Metadata Request Headers a server sets and checks to lock down documents. Covers CSP Level 3 (current, Working Draft) with CSP Level 2…
Conventional Commits: The Conventional Commits specification is a lightweight convention on top of commit messages. Covers Conventional Commits 1.0.0. Use when writing commit messages. Triggers: Conventional Commits.
CycloneDX 1.7 (ECMA-424 2nd edition) Bill of Materials: produce, validate, sign and consume SBOM, SaaSBOM, HBOM, CBOM, ML-BOM, OBOM, MBOM, VDR and VEX documents in JSON, XML or Protobuf. Use when generating or reviewing a CycloneDX BOM in CI, modelling…
Diátaxis: structure documentation into tutorials, how-to guides, reference and explanation. Covers Diátaxis. Use when structuring documentation. Triggers: Diátaxis.
Copy this prompt into the AI assistant you're using.
Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/ScaleDockHQ/better-supabase.Repository README source: README.md
Read the source README