什么是 Supabase Gen？

Supabase Gen 旨在消除编写行级安全策略时的手动劳动和潜在错误。通过分析您的 Prisma Schema，它能够理解底层数据模型和关系，从而创建与应用逻辑一致的安全默认值。对于希望确保数据库受到稳健、生产就绪的 SQL 策略保护，而不愿在语法上耗费数小时的 Openclaw Skills 开发者来说，该技能是一项强大的资产。

该工具填补了 ORM 定义与数据库安全之间的空白。它为 SELECT、INSERT、UPDATE 和 DELETE 操作生成策略，确保用户拥有的资源和多租户数据结构被正确限定范围。通过将其集成到您的 Openclaw Skills 工作流中，您可以在保持高安全性的同时加速开发周期。

下载入口:https://github.com/openclaw/skills/tree/main/skills/lxgicstudios/supabase-gen

安装与下载

1. ClawHub CLI

从源直接安装技能的最快方式。

2. 手动安装

将技能文件夹复制到以下位置之一

优先级：工作区 > 本地 > 内置

3. 提示词安装

将此提示词复制到 OpenClaw 即可自动安装。

Supabase Gen 应用场景

• 在保留现有基于 Prisma 的数据定义的同时，部署新的 Supabase 后端。
• 为当前缺乏保护的现有表补齐行级安全策略。
• 通过生成并对比最新的 RLS 策略与当前实现，进行安全审计。
• 快速构建需要组织范围限定的多租户应用程序原型。

1. 该技能读取您的 Prisma Schema 文件，以识别模型、字段类型和关联关系。
2. 它解释所有权模式，例如识别哪些字段代表用户 ID 或组织成员身份。
3. 应用 AI 逻辑，使用 auth.uid() 等 Supabase 特定函数生成具体的 SQL 策略。
4. 生成的 SQL 将输出到控制台或保存到迁移文件中，以便在 Supabase SQL 编辑器中执行。

Supabase Gen 配置指南

此技能需要 Node.js 18+ 和 OpenAI API 密钥以智能处理 Schema。您可以使用 npx 直接运行，无需永久安装。

# 配置环境变量
export OPENAI_API_KEY=sk-your-key-here

# 从 Schema 生成策略
npx ai-supabase-gen prisma/schema.prisma

# 将输出保存到迁移文件
npx ai-supabase-gen prisma/schema.prisma > supabase/migrations/rls_setup.sql

Supabase Gen 数据架构与分类体系

name: supabase-gen
description: Generate Supabase RLS policies from Prisma schema. Use when setting up row-level security for your tables.

Supabase Gen

Row-level security is a pain to write. This tool reads your Prisma schema and generates proper RLS policies for Supabase. You get secure defaults that actually make sense for your data model.

One command. Zero config. Just works.

Quick Start

npx ai-supabase-gen prisma/schema.prisma

What It Does

• Reads your Prisma schema and understands the data model
• Generates RLS policies for SELECT, INSERT, UPDATE, DELETE
• Creates auth.uid() checks for user-owned resources
• Handles multi-tenant patterns with organization scoping
• Outputs SQL ready to run in Supabase SQL editor

Usage Examples

# Generate RLS from your schema
npx ai-supabase-gen prisma/schema.prisma

# Save to migration file
npx ai-supabase-gen prisma/schema.prisma > supabase/migrations/001_rls.sql

# Specify output format
npx ai-supabase-gen prisma/schema.prisma --format sql

Best Practices

• Review every policy - AI gets close but you know your access patterns best
• Test with different users - RLS bugs are sneaky. Test reads and writes as different roles.
• Start restrictive - Better to block legitimate access than leak data. Loosen later.
• Use service role sparingly - Service role bypasses RLS. That's powerful and dangerous.

When to Use This

• Setting up a new Supabase project with existing Prisma schema
• Adding RLS to tables that currently have none
• Auditing your security and want a fresh set of policies to compare
• Learning RLS patterns and want to see how they should look

Part of the LXGIC Dev Toolkit

This is one of 110+ free developer tools built by LXGIC Studios. No paywalls, no sign-ups, no API keys on free tiers. Just tools that work.

Find more:

• GitHub: https://github.com/LXGIC-Studios
• Twitter: https://x.com/lxgicstudios
• Substack: https://lxgicstudios.substack.com
• Website: https://lxgic.dev

Requirements

No install needed. Just run with npx. Node.js 18+ recommended. Requires OPENAI_API_KEY environment variable.

export OPENAI_API_KEY=sk-...
npx ai-supabase-gen --help

How It Works

Parses your Prisma schema to understand models, relations, and field types. Then generates appropriate RLS policies based on common patterns like user ownership, org membership, and public/private access. Uses GPT to handle edge cases intelligently.

License

MIT. Free forever. Use it however you want.