Habilidades convex-migrate-rehearse

📦

convex-migrate-rehearse

Name: convex-migrate-rehearse
Author: get-convex

Revisión del contenido r1 Seguro ⚙️ Comandos externos

Rehearse Convex Migrations Before Production

Production schema migrations can fail when existing documents do not match new validators. This skill rehearses the migration on snapshot-seeded preview data before promotion.

Compatible con: Claude Codex Code(CC)

🥉 77 Bronce

Maintain this Skill? Claim it 🥉 77 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "convex-migrate-rehearse" from https://skillstore.io/skills/get-convex-convex-migrate-rehearse.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-migrate-rehearse/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/get-convex-convex-migrate-rehearse.md Manifest firmado GET /api/skills/get-convex-convex-migrate-rehearse/manifest Lockfile firmado GET /api/skills/get-convex-convex-migrate-rehearse/lockfile

Pruébalo

Usando "convex-migrate-rehearse". Plan a migration that makes the customer region field required.

Resultado esperado:

The plan first adds an optional region field, backfills existing customers in preview, verifies every document, and then requires the field.

Usando "convex-migrate-rehearse". Review a rehearsal where twelve records still lack the new field.

Resultado esperado:

Promotion is blocked. Resume the batched backfill, verify that no records are missing the field, and repeat the tightened schema deployment.

Usando "convex-migrate-rehearse". Prepare the final production approval checkpoint.

Resultado esperado:

The checkpoint identifies production as the target, summarizes successful preview evidence, requests explicit approval, and warns that snapshot restoration loses later writes.

Auditoría de seguridad

Seguro

v1 • 21/9/2026 Abrir el informe versionado

Four findings are confirmed because the workflow directs external Convex commands that export real data or change remote deployments. Three findings are false positives caused by Markdown code spans that name credentials, tools, or flags without executing them. No prompt injection or malicious intent was found.

Archivos escaneados

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Elementos de revisión de capacidades (4)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

SKILL.md:20

Ruby/shell backtick execution

6. PROMOTE only on the fresh explicit yes from step 1: apply the SAME sequence to prod (optional sch

Line 20 directs production migration operations and documents a replace import for rollback. The restore can discard post-snapshot writes, making this a real high-impact external command risk.

Medio

SKILL.md:16

Ruby/shell backtick execution

2. SNAPSHOT the source data read-only: `npx convex export --path snapshot.zip` (from the deployment

Line 16 explicitly directs an npx Convex export command against a deployment holding real data. The command creates a sensitive local snapshot and therefore has genuine data-handling risk.

Medio

SKILL.md:17

Ruby/shell backtick execution

3. CREATE the preview FROM THE PRE-CHANGE CODE — do this BEFORE editing schema.ts, so the preview st

Line 17 directs Convex deploy and import commands that create and seed a remote preview deployment. These are intentional external state changes, although they are scoped to a preview.

Medio

SKILL.md:18

Ruby/shell backtick execution

4. REHEARSE on the preview, in the migrate order — each push is `npx convex deploy --preview-name mi

Line 18 directs repeated Convex deployment commands and a migration backfill against the preview. These operations intentionally mutate remote schema and data.

Factores de riesgo

⚙️ Comandos externos (7)

SKILL.md:14 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:25

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/get-convex-convex-migrate-rehearse/security.svg)](https://skillstore.io/skills/get-convex-convex-migrate-rehearse?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/get-convex-convex-migrate-rehearse?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-migrate-rehearse/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/get-convex-convex-migrate-rehearse.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

get-convex. (2026). convex-migrate-rehearse security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1

Cita BibTeX

@techreport{get-convex-get-convex-convex-migrate-rehearse-2026,
  author = {get-convex},
  title = {convex-migrate-rehearse security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "convex-migrate-rehearse security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "get-convex"
date-released: "2026-09-21"
url: "https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1"
identifiers:
  - type: other
    value: "skillstore:get-convex-convex-migrate-rehearse:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Validate a schema change

Rehearse a validator change against production-shaped data before changing the live deployment.

Review a migration release

Confirm that schema, backfill, verification, and promotion steps follow one tested sequence.

Prepare a controlled rollout

Document preview evidence, production approval, and rollback consequences for an operational change.

Prueba estos prompts

Check readiness

Review my Convex migration goal and list the preview credentials, source deployment, schema files, and verification details needed before rehearsal.

Build a rehearsal plan

Create a preview rehearsal plan for changing [field] in [table]. Include snapshot, optional schema, backfill, verification, and tightening stages.

Evaluate rehearsal evidence

Assess these preview results: [results]. Identify failed checks, remaining data-shape risks, and evidence required before production approval.

Prepare production promotion

Using this verified sequence, prepare a production runbook with explicit approval, deployment targeting, checkpoints, abort conditions, and snapshot rollback consequences.

Mejores prácticas

Create and seed the preview from pre-change code before editing the schema.
Use optional fields, resumable backfills, verification, and validator tightening in that order.
Confirm the resolved deployment and obtain explicit approval immediately before production changes.

Evitar

Do not tighten validators before existing documents have been backfilled.
Do not seed a snapshot into a preview that already uses the changed schema.
Do not restore a production snapshot without accepting the loss of later writes.

Preguntas frecuentes

Why use a preview deployment?

A preview provides an isolated copy where schema validation can fail without interrupting production.

What credentials are required?

Preview creation requires a Preview Deploy Key. A standard Convex login session cannot create preview deployments.

Can I rehearse without a preview key?

Yes. Use a personal development deployment seeded with the snapshot and clearly record that fallback.

Why must the field become optional first?

Existing documents may not contain the field. Optional validation allows deployment and backfilling before the validator becomes strict.

How is the backfill performed?

The workflow uses batched, resumable migrations through the Convex migrations package instead of one large mutation.

What does rollback preserve?

The snapshot preserves data from export time. Restoring it removes any writes created after that point.

Detalles del desarrollador

Autor

get-convex

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/get-convex/agent-skills/tree/0aa10576821c6928f6a0f498c087af4ee231536e/skills/convex-migrate-rehearse

Ref.

ee1e1d0465cbfd49d2dffacf50000ec9a8812bf0

Actualidad del mantenimiento

21/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md