Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/kastalien-research/thoughtbox/supabasenpx skills add Kastalien-Research/thoughtbox --skill supabasegit clone --depth 1 https://github.com/Kastalien-Research/thoughtboxWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/kastalien-research/thoughtbox/supabase)<a href="https://agentmods.dev/skills/kastalien-research/thoughtbox/supabase"><img src="https://agentmods.dev/badge/skills/kastalien-research/thoughtbox/supabase.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00041 | $0.01473 |
| Opus 5 | $0.00020 | $0.00737 |
| Sonnet 5 | $0.00008 | $0.00295 |
| Haiku 4.5 | $0.00004 | $0.00147 |
Grade A, and why
supabase scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 142 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manage Supabase: $ARGUMENTS
Project Context
- Linked project: Thoughtbox (
akjccuoncxlvrrtkvtno, West US Oregon) - Local DB URL:
postgresql://postgres:[email protected]:54322/postgres - Migrations dir:
supabase/migrations/ - Config:
supabase/config.toml
Commands
Parse the first word of $ARGUMENTS to determine the command:
status — Show local and hosted state
- Run
supabase statusfor local container health - Run
supabase migration listto show local vs remote migration drift - Report: which migrations are local-only, remote-only, or synced
migrate — Create a new migration
Parse remaining arguments for the migration name.
- Run
supabase migration new <name>to create the file - Open the created file path for editing
- Remind: after writing SQL, run
/supabase diffto verify, then/supabase pushto deploy
diff — Diff local schema against migrations
- Run
supabase db diffto show schema changes not captured in migrations - If changes exist, offer to create a migration capturing them
- If clean, report "Schema in sync with migrations"
push — Push migrations to hosted project
- Run
supabase migration listto show what will be pushed - List the pending migrations and their filenames
- Ask for confirmation before proceeding — this modifies the hosted database
- Run
supabase db pushto apply - Run
supabase migration listagain to confirm sync
pull — Pull remote schema to local migrations
- Run
supabase db pullto generate a migration from remote schema changes - Show the generated migration file
- Remind: review the SQL before committing
reset — Reset local database to migrations
- Confirm the user wants to destroy local data
- Run
supabase db resetto drop and re-apply all migrations - Report success and migration count
inspect — Inspect hosted database
Parse remaining arguments for the inspection type. Default to db-stats.
Available inspections:
db-stats— Size, cache hit rates, WAL sizetable-stats— Table sizes and row countsindex-stats— Index usage and bloatoutliers— Slowest querieslocks— Active locksbloat— Table and index bloat estimatesrole-stats— Role information
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 142 lines · 41 tokens per session scan A f4955e88524a
supabase is a skill published in the GitHub repository Kastalien-Research/thoughtbox (64 stars, last pushed 1mo ago), licensed MIT. It adds 41 tokens to every session and 1,473 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
api-canvas
DataCanvas primitive reference — a Tier 3 SQL/analytical workspace for tabular MCP servers, backed by DuckDB. Use when registering tables from upstream APIs, running ad-hoc SQL across them, and exporting results. Covers the acquire → register → query → export flow, per-table TTL, the token-sharing pattern for…
api-mirror
Stand up a persistent, self-refreshing local mirror of a bulk upstream dataset with the MirrorService (@cyanheads/mcp-ts-core/mirror). Use when a server wraps a large or slow API and should query a synced local index (embedded SQLite + FTS5) instead of paginating the live API per request.
add-provider
Add a new storage or service provider to the core package. Use when implementing a new backend for StorageService (e.g., a new database) or a new service provider (e.g., a new LLM backend).
gliderecord-patterns
Write efficient ServiceNow GlideRecord queries — addQuery vs addEncodedQuery, setLimit, GlideAggregate for counts, avoiding N+1 in loops, query operators, and safe CRUD with workflow control.
bulk-update
Update properties or content across many pages in a Notion database with dry-run and error recovery.
organize-database
Transform unstructured Notion pages into a well-designed database with proper schema and migration.