Skills db-migration

📦

db-migration

Name: db-migration
Author: Awais68

Content revision r1 High Risk ⚙️ External commands🔑 Env variables

Manage Alembic Database Migrations

Database schema changes can break applications or lose data when they are handled manually. This skill guides Alembic setup, migration generation, rollback planning, and review for SQLModel and FastAPI projects.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "db-migration" from https://skillstore.io/skills/awais68-db-migration.md and its manifest at https://skillstore.io/api/skills/awais68-db-migration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/awais68-db-migration.md Signed manifest GET /api/skills/awais68-db-migration/manifest Signed lockfile GET /api/skills/awais68-db-migration/lockfile

Test it

Using "db-migration". I need to add a fees table to a SQLModel app.

Expected outcome:

Recommended revision name and generation approach.
Checklist for columns, indexes, foreign keys, and downgrade order.
Test plan for applying and rolling back in a disposable database.

Using "db-migration". Check whether my downgrade plan is safe for release.

Expected outcome:

Summary of operations that may remove data.
Required backup, restore, and approval steps before production use.
Safer alternatives for reversible or phased migrations.

Using "db-migration". Plan a data migration for updating many status values.

Expected outcome:

Batching strategy for large tables.
Validation checks before and after the migration.
Rollback limits and monitoring items for the release window.

Security Audit

High Risk

v8 • 7/5/2026 Open versioned report

The verifier script finding is a false positive; it only validates skill metadata. Most SKILL.md findings are Markdown backtick noise, but the skill does direct users to run mutable Alembic commands and includes destructive migration examples. No prompt injection or data exfiltration intent was found, but database safety controls should be strengthened.

Files scanned

415

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:207-215 SKILL.md:263-276 SKILL.md:281-284

Destructive Database Operation Guidance

The skill includes downgrade-to-base, drop table, drop column, drop type, and bulk update examples. These operations can delete or corrupt production data without backup and approval controls.

The cited lines explicitly describe downgrade base and drop operations. These are legitimate migration actions, but the data-loss risk is clear and high impact.

Medium

SKILL.md:38-40 SKILL.md:56-58

Plaintext Database URL Examples

The examples show database connection URLs with user and password placeholders inside configuration. This can normalize storing credentials in committed files instead of secret-managed configuration.

The values appear to be placeholders, not real secrets. The risk is guidance quality because users may copy the pattern into project files.

Capability review items (13)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:21

Ruby/shell backtick execution

| `alembic upgrade head` | Apply all pending migrations |

The line instructs use of alembic upgrade head, which applies database schema changes. Running it on the wrong database can cause outages or data loss.

High

SKILL.md:22

Ruby/shell backtick execution

| `alembic upgrade +1` | Apply one migration at a time |

The line instructs use of alembic upgrade +1, which mutates database schema state. It is legitimate but risky without backups and environment confirmation.

High

SKILL.md:23

Ruby/shell backtick execution

| `alembic downgrade -1` | Rollback last migration |

The line instructs use of alembic downgrade -1, which can reverse schema changes and remove data. Downgrades require explicit confirmation and backups.

High

SKILL.md:24

Ruby/shell backtick execution

| `alembic downgrade base` | Rollback all migrations |

The line instructs use of alembic downgrade base, which can remove all migration-applied schema state. This is destructive on any important database.

High

SKILL.md:186-195

Ruby/shell backtick execution

```bash

The fenced bash example applies migrations with alembic upgrade commands. These commands mutate database schema and can break production systems if misused.

High

SKILL.md:207-216

Ruby/shell backtick execution

```bash

The fenced bash example includes alembic downgrade commands, including rollback to base. These operations can remove schema objects and data.

Medium

SKILL.md:18

Ruby/shell backtick execution

| `alembic init alembic` | Initialize Alembic in project |

The line documents an Alembic CLI command that creates migration files in the project. It is expected for this skill, but it is still an external command that should require user approval.

Medium

SKILL.md:19

Ruby/shell backtick execution

| `alembic revision --autogenerate -m "message"` | Generate migration from model changes |

The line instructs use of alembic revision with autogeneration, which writes migration files based on model state. This is legitimate but can create unsafe schema changes if not reviewed.

Medium

SKILL.md:20

Ruby/shell backtick execution

| `alembic revision -m "message"` | Create empty migration manually |

The line instructs use of alembic revision to create migration files. This is expected migration tooling, but it modifies the repository and should be reviewed.

Medium

SKILL.md:32-34

Ruby/shell backtick execution

```bash

The fenced bash example contains alembic init alembic, which creates migration scaffolding in the project. It is an expected command but still an external write operation.

Medium

SKILL.md:100-106

Ruby/shell backtick execution

```bash

The fenced bash example contains alembic revision commands that create migration files. Autogenerated migrations can include unintended schema changes if not reviewed.

Medium

SKILL.md:110-113

Ruby/shell backtick execution

```bash

The fenced bash example creates an empty Alembic revision file. This is normal workflow but still writes to the repository.

Medium

SKILL.md:301-304

Ruby/shell backtick execution

```bash

The fenced bash example runs alembic revision --autogenerate, which writes migration files. The command is legitimate but requires review before applying.

Risk Factors

⚙️ External commands (49)

🔑 Env variables (2)

SKILL.md:64 SKILL.md:78

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/awais68-db-migration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/awais68-db-migration/security.svg)](https://skillstore.io/skills/awais68-db-migration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/awais68-db-migration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/awais68-db-migration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/awais68-db-migration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Awais68. (2026). db-migration security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/awais68-db-migration/audits/8

BibTeX citation

@techreport{awais68-awais68-db-migration-2026,
  author = {Awais68},
  title = {db-migration security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/awais68-db-migration/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "db-migration security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "Awais68"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/awais68-db-migration/audits/8"
identifiers:
  - type: other
    value: "skillstore:awais68-db-migration:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add a Model Table

Plan an Alembic revision for a new SQLModel table, including indexes, constraints, and a downgrade path.

Prepare Release Migrations

Create a staged migration checklist with history checks, test upgrades, and rollback boundaries.

Review Generated Revisions

Check autogenerated migrations for unintended drops, missing constraints, data movement, and release risk.

Try These Prompts

Set Up Alembic

Help me initialize Alembic for a FastAPI SQLModel project. Show the files to configure and explain each setting.

Generate a Revision

I changed these SQLModel models: [describe changes]. Guide me through generating and reviewing an Alembic migration safely.

Review Rollback Safety

Review this migration plan for upgrade and downgrade safety. Identify data loss risks, missing indexes, and required test steps.

Design Data Migration

Design a production-safe Alembic data migration for a large table. Include batching, validation, rollback limits, and release checks.

Best Practices

Run migrations against a disposable database before any shared environment.
Review autogenerated revisions for unintended table, column, index, or constraint changes.
Take backups and define rollback limits before production upgrades.

Avoid

Running downgrade base against any database that contains important data.
Committing placeholder database credentials without replacing them with secure configuration.
Accepting autogenerated migrations without checking data migrations and constraints.

Frequently Asked Questions

Does this skill run migrations automatically?

No. It provides guidance and examples. Users or agents must run commands with explicit approval.

Can it be used with PostgreSQL?

Yes. The examples include PostgreSQL-oriented Alembic and SQLModel patterns.

Does it support production migrations?

It can help plan them, but production changes still need backups, testing, and operational approval.

Can it create data migrations?

Yes. It includes guidance for batch updates and status changes inside Alembic revisions.

Is it limited to SQLModel?

The examples focus on SQLModel and FastAPI, but many Alembic concepts also apply to SQLAlchemy projects.

What is the main safety concern?

Downgrades, drops, and data updates can remove or corrupt data when used without backups and review.

Developer Details

Author

Awais68

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Awais68/hackathon-2-phase-ii-full-stack-web-app/tree/main/.claude/skills/db-migration

Ref

5ab1d37e83436c6eef84de88573e142b94f2a4ad

Maintenance freshness

7/18/2026

Usage

7 downloads · 151 views

File structure

📁 scripts/

📄 verify.py

📄 SKILL.md