Compétences convex-migrate-rehearse
📦

convex-migrate-rehearse

Révision du contenu r1 Sûr ⚙️ Commandes externes

Rehearse Convex Migrations Before Production

Production schema migrations can fail when existing documents do not match new validators. This skill rehearses the migration on snapshot-seeded preview data before promotion.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it 🥉 77 Bronze

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "convex-migrate-rehearse" from https://skillstore.io/skills/get-convex-convex-migrate-rehearse.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-migrate-rehearse/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/get-convex-convex-migrate-rehearse.md manifest signé GET /api/skills/get-convex-convex-migrate-rehearse/manifest lockfile signé GET /api/skills/get-convex-convex-migrate-rehearse/lockfile

Tester

Utilisation de « convex-migrate-rehearse ». Plan a migration that makes the customer region field required.

RĂ©sultat attendu:

The plan first adds an optional region field, backfills existing customers in preview, verifies every document, and then requires the field.

Utilisation de « convex-migrate-rehearse ». Review a rehearsal where twelve records still lack the new field.

RĂ©sultat attendu:

Promotion is blocked. Resume the batched backfill, verify that no records are missing the field, and repeat the tightened schema deployment.

Utilisation de « convex-migrate-rehearse ». Prepare the final production approval checkpoint.

RĂ©sultat attendu:

The checkpoint identifies production as the target, summarizes successful preview evidence, requests explicit approval, and warns that snapshot restoration loses later writes.

Audit de sécurité

Sûr
v1 • 21/09/2026 Ouvrir le rapport versionné

Four findings are confirmed because the workflow directs external Convex commands that export real data or change remote deployments. Three findings are false positives caused by Markdown code spans that name credentials, tools, or flags without executing them. No prompt injection or malicious intent was found.

1
Fichiers analysés
32
Lignes analysées
4
Éléments à examiner
0
Faux positifs ignorés
Éléments d’évaluation des capacités (4)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Élevé
SKILL.md:20
Ruby/shell backtick execution
6. PROMOTE only on the fresh explicit yes from step 1: apply the SAME sequence to prod (optional sch
Line 20 directs production migration operations and documents a replace import for rollback. The restore can discard post-snapshot writes, making this a real high-impact external command risk.
Moyen
SKILL.md:16
Ruby/shell backtick execution
2. SNAPSHOT the source data read-only: `npx convex export --path snapshot.zip` (from the deployment
Line 16 explicitly directs an npx Convex export command against a deployment holding real data. The command creates a sensitive local snapshot and therefore has genuine data-handling risk.
Moyen
SKILL.md:17
Ruby/shell backtick execution
3. CREATE the preview FROM THE PRE-CHANGE CODE — do this BEFORE editing schema.ts, so the preview st
Line 17 directs Convex deploy and import commands that create and seed a remote preview deployment. These are intentional external state changes, although they are scoped to a preview.
Moyen
SKILL.md:18
Ruby/shell backtick execution
4. REHEARSE on the preview, in the migrate order — each push is `npx convex deploy --preview-name mi
Line 18 directs repeated Convex deployment commands and a migration backfill against the preview. These operations intentionally mutate remote schema and data.

Facteurs de risque

⚙️ Commandes externes (7)
SKILL.md:14 SKILL.md:16 SKILL.md:17 SKILL.md:18 SKILL.md:19 SKILL.md:20 SKILL.md:25
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné
Évaluation de sécurité

Copier le lien du rapport

https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/get-convex-convex-migrate-rehearse/security.svg)](https://skillstore.io/skills/get-convex-convex-migrate-rehearse?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/get-convex-convex-migrate-rehearse?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-migrate-rehearse/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/get-convex-convex-migrate-rehearse.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

get-convex. (2026). convex-migrate-rehearse security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1

Citation BibTeX

@techreport{get-convex-get-convex-convex-migrate-rehearse-2026, author = {get-convex}, title = {convex-migrate-rehearse security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "convex-migrate-rehearse security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "get-convex" date-released: "2026-09-21" url: "https://skillstore.io/skills/get-convex-convex-migrate-rehearse/audits/1" identifiers: - type: other value: "skillstore:get-convex-convex-migrate-rehearse:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
83
Conformité aux spécifications

Ce que vous pouvez créer

Validate a schema change

Rehearse a validator change against production-shaped data before changing the live deployment.

Review a migration release

Confirm that schema, backfill, verification, and promotion steps follow one tested sequence.

Prepare a controlled rollout

Document preview evidence, production approval, and rollback consequences for an operational change.

Essayez ces prompts

Check readiness 
Review my Convex migration goal and list the preview credentials, source deployment, schema files, and verification details needed before rehearsal.
Build a rehearsal plan 
Create a preview rehearsal plan for changing [field] in [table]. Include snapshot, optional schema, backfill, verification, and tightening stages.
Evaluate rehearsal evidence 
Assess these preview results: [results]. Identify failed checks, remaining data-shape risks, and evidence required before production approval.
Prepare production promotion 
Using this verified sequence, prepare a production runbook with explicit approval, deployment targeting, checkpoints, abort conditions, and snapshot rollback consequences.

Bonnes pratiques

  • Create and seed the preview from pre-change code before editing the schema.
  • Use optional fields, resumable backfills, verification, and validator tightening in that order.
  • Confirm the resolved deployment and obtain explicit approval immediately before production changes.

Éviter

  • Do not tighten validators before existing documents have been backfilled.
  • Do not seed a snapshot into a preview that already uses the changed schema.
  • Do not restore a production snapshot without accepting the loss of later writes.

Foire aux questions

Why use a preview deployment?
A preview provides an isolated copy where schema validation can fail without interrupting production.
What credentials are required?
Preview creation requires a Preview Deploy Key. A standard Convex login session cannot create preview deployments.
Can I rehearse without a preview key?
Yes. Use a personal development deployment seeded with the snapshot and clearly record that fallback.
Why must the field become optional first?
Existing documents may not contain the field. Optional validation allows deployment and backfilling before the validator becomes strict.
How is the backfill performed?
The workflow uses batched, resumable migrations through the Convex migrations package instead of one large mutation.
What does rollback preserve?
The snapshot preserves data from export time. Restoring it removes any writes created after that point.

Détails du développeur

Auteur

get-convex

Licence

MIT

RĂ©vision Skillstore

r1

Avis de version

L’auteur n’a déclaré aucune version.

DĂ©pĂ´t

https://github.com/get-convex/agent-skills/tree/0aa10576821c6928f6a0f498c087af4ee231536e/skills/convex-migrate-rehearse

RĂ©f

ee1e1d0465cbfd49d2dffacf50000ec9a8812bf0

RĂ©cence de maintenance

21/09/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

đź“„ SKILL.md