openrouter-compliance-review
Review OpenRouter integration for regulatory compliance (SOC2, GDPR,
supabase-install-auth
Install and configure Supabase SDK, CLI, and project authentication.
Full skill instructions
Install the Supabase SDK, CLI, and project credentials from scratch — covering package install, environment configuration, client initialization, and connection verification for both TypeScript (@supabase/supabase-js) and Python (supabase).
Key facts:
@supabase/supabase-jssupabase (via pip)createClient() — never new SupabaseClient()supabase start)Install the SDK and the Supabase CLI:
JavaScript / TypeScript:
# Install the SDK
npm install @supabase/supabase-js
# For SSR frameworks (Next.js, SvelteKit, Nuxt), also install:
npm install @supabase/ssr
# Install the Supabase CLI (for types, migrations, local dev)
npm install -D supabase
Python:
# Install the SDK
pip install supabase
# Install the CLI (alternative: brew install supabase/tap/supabase)
npm install -g supabase
Verify the CLI is available:
npx supabase --version
Retrieve project credentials from the Supabase Dashboard (Settings > API) and create the env file:
# .env.local (or .env)
SUPABASE_URL=https://<project-ref>.supabase.co
SUPABASE_KEY=eyJhbGciOiJIUzI1NiIs... # anon key — safe for client-side
SUPABASE_SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1... # admin key — server-side ONLY
Add env files to .gitignore immediately:
.env
.env.local
.env.*.local
Security rules:
SUPABASE_KEY) is safe for client-side code. It respects Row Level Security (RLS) policies.SUPABASE_SERVICE_ROLE_KEY) bypasses RLS entirely. Use only on the server. Never bundle into client code or expose in browser.Create a client singleton and verify connectivity:
TypeScript — client-side (anon key):
// lib/supabase.ts
import { createClient } from '@supabase/supabase-js'
const supabase = createClient(
process.env.SUPABASE_URL!,
process.env.SUPABASE_KEY!
)
export default supabase
TypeScript — server-side (service role key):
// lib/supabase-admin.ts
import { createClient } from '@supabase/supabase-js'
export const supabaseAdmin = createClient(
process.env.SUPABASE_URL!,
process.env.SUPABASE_SERVICE_ROLE_KEY!,
{
auth: {
autoRefreshToken: false,
persistSession: false,
},
}
)
Python — client initialization:
# lib/supabase_client.py
import os
from supabase import create_client
url = os.environ["SUPABASE_URL"]
key = os.environ["SUPABASE_KEY"]
supabase = create_client(url, key)
Verify the connection:
// Quick connectivity check
const { data, error } = await supabase.from('_health_check').select('*').limit(1)
if (error && error.code !== 'PGRST116') {
// PGRST116 = relation does not exist (expected if table doesn't exist yet)
throw new Error(`Supabase connection failed: ${error.message}`)
}
console.log('Supabase connected successfully')
Optional — generate TypeScript types from the database schema:
npx supabase login
npx supabase link --project-ref <your-project-ref>
npx supabase gen types typescript --linked > lib/database.types.ts
Then add the type parameter to the client:
import type { Database } from './database.types'
const supabase = createClient<Database>(url, key)
Completing all three steps produces:
@supabase/supabase-js or supabase Python package installednpx supabase.env.local containing SUPABASE_URL, SUPABASE_KEY, and SUPABASE_SERVICE_ROLE_KEYlib/supabase.ts or lib/supabase_client.py)lib/supabase-admin.ts, TypeScript only)| Error | Cause | Fix |
|---|---|---|
FetchError: request failed | Wrong SUPABASE_URL | Verify URL at Dashboard > Settings > API |
Invalid API key | Wrong or expired key | Copy fresh anon key from Dashboard > Settings > API |
PGRST301: JWSError | Malformed JWT in key | Remove trailing whitespace/newlines from env var |
Cannot find module '@supabase/supabase-js' | SDK not installed | Run npm install @supabase/supabase-js |
ModuleNotFoundError: No module named 'supabase' | Python SDK not installed | Run pip install supabase |
supabase: command not found | CLI not installed | Run npm install -D supabase, then use npx supabase |
Error: supabase start fails | Docker not running | Start Docker Desktop, then retry npx supabase start |
TypeError: SupabaseClient is not a constructor | Wrong import pattern | Use createClient() — not new SupabaseClient() |
Full TypeScript and Python examples with auth sign-up, sign-in, session management, SSR patterns, and type-safe queries: examples
createClient options, auth, database, storage, realtimeAfter successful setup, continue with:
Review OpenRouter integration for regulatory compliance (SOC2, GDPR,
Data synchronization, ETL patterns, and data management for MaintainX.
Execute Groq primary workflow: chat completions with tool use and JSON
Validate CSRF protection implementations for security gaps. Use when
Configure this skill should be used when the user asks about "API contract",
Execute Ideogram incident response with triage, mitigation, and postmortem.
Execute create, select, and transform features to improve machine learning
Reusable patterns for the Gamma REST API (no SDK exists).
Apply production-ready Deepgram SDK patterns for TypeScript and Python.
Migrate to OpenRouter from direct provider APIs or upgrade between SDK/model
Diagnose and fix common OpenRouter API errors. Use when encountering
Optimize Linear API usage, reduce unnecessary calls, and maximize
Generate, edit, and beat-sync AI video with leading models in one workspace.
The world's fastest calendar for remote work
Transform Your Design with AI Designer by ImgCreator.ai
Revolutionizing Video Production with AI-Powered Creativity
Extend an image past the frame and let AI fill the new aspect ratio.
Discover your celebrity doppelgänger with StarByFace!
ChainClarity explains 700+ crypto whitepapers in plain English, with layered summaries, comparisons, research tools, alerts, and a $4.99 Pro plan.
Opus.ai: Revolutionize Your Web Experience