{"agent":"claude","input":"Use the Supabase connection. Call list_tables, get_advisors for security, and read-only execute_sql. Read every table in the public schema with its row-level security status, policies (including expressions) and grants. Write rls-audit.md listing tables without row-level security, policies whose condition is always true, tables the anon role can read or write, and a suggested policy for each finding. Do not call apply_migration. Read only; run no DDL."}