saas-resources-hub

A growing collection of Claude Code skills that encode real, production-tested patterns for indie SaaS builders.

Every skill in this repository is extracted from architecture that is actually running in production — not from tutorials or thought experiments. The first skill comes from ATSBuddy, a live SaaS product built on Next.js, Supabase, and Polar.sh.

What is a Claude Code skill?

A skill is a folder containing a SKILL.md file (plus optional reference docs and asset templates) that teaches Claude Code a specific, repeatable capability. When your request matches a skill's description, Claude loads it and follows its battle-tested instructions instead of improvising.

Installation

Clone the repo and copy the skill you want into your project's .claude/skills/ directory (or ~/.claude/skills/ to make it available in every project):

git clone https://github.com/mahfuzurrahman01/saas-resources-hub.git

# Per-project install
mkdir -p your-project/.claude/skills
cp -r saas-resources-hub/skills/nextjs-supabase-polar-starter your-project/.claude/skills/

# Or global install
mkdir -p ~/.claude/skills
cp -r saas-resources-hub/skills/nextjs-supabase-polar-starter ~/.claude/skills/

Then just ask Claude Code for what you need — e.g. "scaffold a multi-tenant SaaS with Supabase credits and Polar payments" — and the skill activates automatically.

Available skills

Skill Description Status
nextjs-supabase-polar-starter Scaffold or audit a multi-tenant SaaS billing/auth stack: server-authoritative credit ledger (Supabase SECURITY DEFINER), Polar.sh Merchant of Record payments, Google OAuth, RLS patterns. Works from regions where Stripe/Paddle are unavailable. ✅ Stable

Roadmap

Skill What it will cover Status
whatsapp-business-platform WhatsApp Business Platform integration patterns: Cloud API setup, template messages, webhooks, conversation pricing. 🔜 Coming soon
supabase-rls-audit Systematic Row Level Security audit for Supabase projects: policy coverage, privilege-escalation checks, service-role leak detection. 🔜 Coming soon

Have an idea for a skill? Propose one.

Why these patterns?

Indie builders outside the "supported countries" list of mainstream payment processors face a real gap: Stripe, Paddle, and Lemon Squeezy are unavailable or restricted in many regions (Bangladesh, Pakistan, Nigeria, and dozens more). The patterns here were developed while shipping a production SaaS from Bangladesh — Merchant of Record billing via Polar.sh, server-authoritative credits so no client can forge a balance, and append-only ledgers so every credit movement is auditable.

If you're in the same boat, this repo is for you. If you're not, the architecture is still a solid, secure default for any credit-based SaaS.

Contributing

Contributions are welcome! Please read CONTRIBUTING.md for the skill authoring standards and PR process, and our Code of Conduct.

License

MIT © Mahfuzur Rahman