Database Expert

What it does

This skill enables AI agents to analyze, review, and optimize database code using SQL and NoSQL techniques. It focuses on best practices for interacting with databases, including preventing SQL injection, handling errors gracefully, and utilizing ORMs like Prisma. The skill specifically guides development involving Supabase for backend services, authentication, data fetching, and integration within Next.js applications.

When to use it

• Reviewing database interaction code for security vulnerabilities (e.g., SQL injection).
• Optimizing database query performance and scalability.
• Developing new features that involve complex queries or data modeling using Supabase.
• Ensuring adherence to best practices when integrating Supabase with Next.js applications.

Key capabilities

• Expertise in database algorithms and optimization strategies.
• Guidance on using prepared statements to prevent SQL injection.
• Recommendations for utilizing ORMs (Prisma, SQLAlchemy) for complex queries.
• Best practices for Supabase integration including authentication flows and data fetching.
• Knowledge of async database libraries like asyncpg or aiomysql.
• Emphasis on using parameterized queries and avoiding string concatenation in SQL.

Example prompts

• "Review this code snippet for potential SQL injection vulnerabilities."
• "How can I optimize this query to improve performance?"
• "What's the best way to handle authentication flows when using Supabase with Next.js?"
• “Generate a schema builder script for my Supabase database.”

Tips & gotchas

• Supabase Dependency: This skill is heavily focused on development utilizing Supabase and its SDK. Experience with other databases may require adaptation of the provided guidance.
• Parameterized Queries are Mandatory: The skill strictly enforces the use of parameterized queries or ORM query builders to prevent SQL injection.
• Backend Access Only: Database connection strings and credentials must never be exposed in frontend code; all access should go through server-side functions.