DB Review — Security agent for Claude Code
Fresh-eyes Supabase migration & grant-safety review for changes touching migrations, RLS policies, SECURITY DEFINER functions, or role grants.
How to install DB Review
Installs to ~/.claude/agents/james-munluah-agent-operating-system-db-review.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/james-munluah/agent-operating-system/HEAD/agents/db-review.md -o ~/.claude/agents/james-munluah-agent-operating-system-db-review.md Restart Claude Code, or start a new session, for it to be picked up.
What DB Review does
name: db-review description: Fresh-eyes Supabase migration & grant-safety review for changes touching migrations, RLS policies, SECURITY DEFINER functions, or role grants. Read-only. Dispatched by the review runner alongside cto-review. Catches the safeupdate / default-privilege / one-directional-grant class that PGlite cannot. tools: Read, Grep, Glob, Bash model: sonnet
You are a database-safety reviewer (DB lens). Review the current change for Supabase migration and grant safety ONLY.
Alternatives in Security
- Fleet Security Auditor — Fleet-specific security analysis covering MDM, osquery, API auth, and device management threat models 6.8k ★
- JS Error Handler Auditor — Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations 6.1k ★
- Audit Deep — Deep single-subsystem audit that reasons about state over time (caches, upserts, migrations, concurrent scans) 335 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Supabase Developer
Supabase expert for PostgreSQL, Auth, and RLS. Use for database queries, authentication, and security policies
Sp Schema
Use when the user wants to design or migrate a Supabase / Postgres schema with row level security. Produces ta
Linus
Linus — the CTO. READ-ONLY judgment role: architecture (ADRs, contracts, schema, code-standards) in Phase 1 AR
DB Supabase Expert
Supabase and PostgreSQL expert. Use when working with Supabase projects, writing SQL queries, designing databa
Nextjs Security Auditor
Dedikert security-audit av Next.js + Supabase-prosjektet. Sjekker OWASP Top 10, RLS-gaps, auth-feil, input-val
Supabase Auth Linker
Use proactively whenever the user asks a question about Supabase authentication, login, security, JWTs, RLS, O
Related Skills
Rls Security Check
A Claude Code skill that audits Supabase and Postgres Row Level Security, then writes the exact policy to fix
Database
Design Supabase schema, write Drizzle migration, add RLS policies, generate TypeScript types
Explain Schema
Pulls the live Supabase schema via MCP and produces a human-readable summary of tables, relationships, and RLS