All skills
14 of 113 — copy any prompt into Lovable, or read the guide.
Add a server secret
Store a third-party API key in Lovable Cloud and read it inside a server function handler.
Append-only audit log table
Record who changed what and when, in a table nobody can edit or delete — including admins.
Create a Postgres table with RLS
Prompt Lovable to create a public table with proper GRANTs and Row Level Security policies in one migration.
Create a storage bucket + upload
Ask Lovable to create a public/private bucket, RLS-style policies, and a typed upload helper.
Data backfill safely
Backfill a new column with a batched update to avoid long locks.
Enable Lovable Cloud
Turn on Lovable's built-in backend — Postgres, auth, storage, edge functions — with zero external accounts.
Export your database
Cloud → Advanced settings → Export data gives you a downloadable dump when you need it.
Index the hot query paths
The first cause of slow Lovable Cloud pages is a missing index on the query's filter/order columns.
Migration authoring rules
Every CREATE TABLE in public must be followed by GRANTs before ENABLE RLS — otherwise the API returns permission errors even with policies in place.
Realtime subscriptions
Subscribe to Postgres change events and re-render a list live.
Run a scheduled job with pg_cron
Schedule a daily cleanup via pg_cron hitting a public API route.
Soft delete with restore window
Prompt Lovable to add a deleted_at column, filter it everywhere, and give users a 30-day restore window.
User roles the safe way
Never store role on the profile table. Use a dedicated user_roles table + has_role() SECURITY DEFINER function to prevent privilege escalation.
When to use an Edge Function vs a server function
Edge Functions are for webhooks, cron, and public HTTP endpoints. For app-internal RPC use TanStack server functions instead.