Skills
Next.js 15 + Supabase Architecture Rules
by PatrickJS
27 Cursor rules for Next.js 15 with Supabase: verified server auth, async params, row level security and Stripe key safety.
Our verdict
We have not reviewed Next.js 15 + Supabase Architecture Rules yet
No one at Enterprise DNA has checked this listing against its sources. The description comes from public listings gathered automatically. Any fact below shows where it came from and when it was last checked.
From the listing
About Next.js 15 + Supabase Architecture Rules
A Cursor rules file from the awesome-cursorrules collection for Next.js 15 (App Router, React 19), strict TypeScript, Tailwind and shadcn/ui, Supabase with row level security, Zod and server-side Stripe. Its 27 rules target mistakes coding agents often make, such as using getSession instead of getUser on the server, reading params synchronously, deprecated imports, missing RLS policies and exposing Stripe keys.
Best for
Teams building Next.js 15 apps on Supabase with Cursor or Claude Code
Use cases
- Keep a coding agent from writing insecure Supabase auth checks
- Enforce Next.js 15 async params across a codebase
- Set house rules for a new Next.js and Supabase project
Notes
Why it matters
Coding agents repeat a few dangerous patterns in Supabase apps, getSession on the server being the worst. A rules file that forbids them is a cheap guard.
Source
- Skill file: rules/nextjs15-supabase-cursorrules-prompt-file.mdc in PatrickJS/awesome-cursorrules.
- Repository: 41,015 GitHub stars, CC0-1.0 licence. Checked 24 Oct 2026 through the GitHub API.
- Last change to the skill: 13 May 2026.
- This page was written from the skill's own SKILL.md. It is not an Enterprise DNA source review and the skill has not been installed or tested by us.
Pros
- Targets real security mistakes, not style
- Explains the reason behind each rule
- Public domain licence
Cons
- Fixed to one stack and version
- A rules file, not a skill with scripts or references
Key facts
What we have checked
Not checked yet. Dated facts such as prices, releases and repository activity appear here once we have confirmed them from a source.
Health and security
Is Next.js 15 + Supabase Architecture Rules looked after, and what do its setup files show
Security check static checks
100 out of 100
- Note No dependency list or install command was found in the skill, so there were no packages to look up on OSV.
Sources
Where this comes from
No sources recorded yet. Each source we check is listed here with the date we checked it.
A source shows what was published when we checked it. It does not certify security, performance or a working installation. Read our method.
Changelog
What changed
No changes recorded yet. Releases, price changes and deprecations appear here, with their dates, once we track them for this record.
Pairs with
Other entries in the index that connect to this one. Click through to see the chain.
better-auth-best-practices
better-auth
Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables. Use when users mention Better Auth…
csharp-developer
Jeffallan
67 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.
Get the free Developer’s Field Guide
A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.
Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.