📦
verification-protocol
80Verify Agent Completion With Evidence
AI agents can mark work complete without proof, which creates false completion risk. This skill requires independent evidence before task completion is accepted.
Productivity View
Skills database-migration
📦
database-migration
Content revision r1 High Risk ⚙️ External commands
Create Safe Supabase Migrations
Database migrations can break tenant isolation when schema changes and RLS policies drift. This skill gives Claude, Codex, and Claude Code a repeatable Supabase migration workflow.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "database-migration" from https://skillstore.io/skills/cleanexpo-database-migration.md and its manifest at https://skillstore.io/api/skills/cleanexpo-database-migration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "database-migration". Add a tenant-scoped agent registry table.
Expected outcome:
- A timestamped migration filename.
- A table, index, and constraint plan.
- Workspace isolation and RLS policy notes.
- A checklist for review before applying the migration.
Using "database-migration". Review a migration that adds policies to a workspace table.
Expected outcome:
The skill identifies missing workspace indexes, unsafe broad policies, and required validation steps before dashboard execution.
Using "database-migration". Create an enum and trigger migration plan.
Expected outcome:
The skill outlines idempotent enum handling, trigger replacement steps, comments, and syntax testing reminders.
Security Audit
High Riskv8 • 7/5/2026 Open versioned report
Static findings for backtick execution and reconnaissance are false positives caused by Markdown formatting and SQL examples. The skill has one real semantic risk: an example system RLS policy grants unrestricted access without role scoping.
1
Files scanned
252
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Overly Permissive RLS Policy Example
SKILL.md recommends a system RLS policy with FOR ALL USING (true) WITH CHECK (true). Without role scoping, generated migrations can bypass workspace isolation when database grants permit access.
The unsafe policy is explicit in the main migration example. Exact exploitability depends on Supabase grants, but the guidance can generate unsafe RLS behavior.
Risk Factors
⚙️ External commands (27)
SKILL.md:17-23 SKILL.md:23-27 SKILL.md:27-30 SKILL.md:30-32 SKILL.md:32-36 SKILL.md:36 SKILL.md:38-85 SKILL.md:85-89 SKILL.md:89 SKILL.md:91-105 SKILL.md:105-125 SKILL.md:125-147 SKILL.md:147-151 SKILL.md:151-156 SKILL.md:156-160 SKILL.md:160-174 SKILL.md:174-182 SKILL.md:182-194 SKILL.md:194-198 SKILL.md:198-203 SKILL.md:203-207 SKILL.md:207-216 SKILL.md:216-225 SKILL.md:225-226 SKILL.md:226-241 SKILL.md:241 SKILL.md:244
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/cleanexpo-database-migration/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/cleanexpo-database-migration?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/cleanexpo-database-migration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cleanexpo-database-migration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/cleanexpo-database-migration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
CleanExpo. (2026). database-migration security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cleanexpo-database-migration/audits/8BibTeX citation
@techreport{cleanexpo-cleanexpo-database-migration-2026,
author = {CleanExpo},
title = {database-migration security audit report (audit version 8)},
institution = {Skillstore},
year = {2026},
number = {8},
url = {https://skillstore.io/skills/cleanexpo-database-migration/audits/8},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "database-migration security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
- name: "CleanExpo"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/cleanexpo-database-migration/audits/8"
identifiers:
- type: other
value: "skillstore:cleanexpo-database-migration:audit:8"
description: "Skillstore immutable audit report identifier"
Compare variants
4 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Higher Skillstore usage
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
wshobson Recommended
wshobson-database-migration
Skillstore Score 78
Evidence Confidence High
Skillstore usage 16
Updated
2026-08-21
sickn33-database-migration
Skillstore Score 78
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
doyajin174-database-migration
Skillstore Score 70
Evidence Confidence High
Skillstore usage 5
Updated
2026-08-21
CleanExpo Current
cleanexpo-database-migration
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 9
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
87
Content
72
Community
83
Spec Compliance
What You Can Build
Add Tenant Tables
Create a migration plan for a new workspace-scoped table with indexes, constraints, and RLS policy notes.
Standardize Migration Reviews
Use the checklist to review migration files for idempotency, workspace isolation, and documentation gaps.
Audit RLS Changes
Check whether proposed policies follow the user_organizations and workspaces join pattern before release.
Try These Prompts
Plan a Basic Migration
Use this database migration skill to plan a Supabase migration for [table or change]. Include the filename, required checks, and review checklist.
Add Workspace Isolation
Create a migration outline for [feature] that includes workspace isolation, indexes, constraints, comments, and RLS policy guidance.
Review an Existing Migration
Review this migration for idempotency, RLS coverage, workspace isolation, foreign keys, and operational risks. Return prioritized fixes.
Design a Multi-Step Schema Change
Design a safe Supabase migration sequence for [schema change]. Include dependencies, rollback considerations, RLS review points, and validation steps.
Best Practices
- Check existing schema references and migrations before creating a new file.
- Use idempotent statements so repeated execution does not fail.
- Review every RLS policy against workspace isolation requirements before applying it.
Avoid
- Creating tenant tables without a workspace_id column or index.
- Adding broad system policies without scoping them to a trusted role.
- Applying migrations before checking syntax, constraints, and existing objects.
Frequently Asked Questions
What projects is this skill for?
It is for Supabase projects that use PostgreSQL, RLS policies, and workspace-based tenant isolation.
Does it run database migrations?
No. It guides planning, writing, and reviewing migrations. A user still applies the SQL through approved tooling.
Can it inspect my live database?
Only if the active agent already has authorized access. The skill itself does not provide database connectivity.
How does it handle RLS?
It recommends workspace-based policies using user_organizations and workspaces joins, with extra review for system access.
Can Claude Code or Codex use it?
Yes. The metadata marks support for Claude, Codex, and Claude Code workflows.
What should I review before production use?
Review role scoping, service-role access, workspace indexes, constraints, and whether every table has appropriate RLS.
Developer Details
Author
CleanExpoLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
02f077c174c5335e2f5d02ca15e77b70d9543e58
Maintenance freshness
7/18/2026
Usage
7 downloads · 307 views
File structure
📄 SKILL.md
More from CleanExpo
View all📦
video-generation-skill
79Create AI Video Plans for Marketing
Marketing teams need clear video plans before using generation tools. This skill turns campaign ideas into scripts, shot lists, platform notes, and edit guidance.
Design & Creative View
📦
no-bluff-seo-skill
79Validate SEO Claims With Evidence
SEO copy often includes claims that are hard to verify. This skill guides Claude, Codex, and Claude Code to source claims, score confidence, and separate facts from forecasts.
Writing & Content View
📦
visual-engine-skill
79Build Accessible Visual Experiences
Visual experiences can become inconsistent, slow, or inaccessible across pages. This skill guides animation, gallery, demo, and Three.js updates with clear safety constraints.
Design & Creative View
📦
conversion-copywriting
79Write Verified Conversion Copy
Marketing pages often sound generic and make claims that cannot be verified. This skill helps Claude, Codex, and Claude Code produce focused copy grounded in research.
Writing & Content View
📦
build-diagnostics
79Diagnose Build Failures With Root Cause Analysis
Build blockers often hide behind unclear logs, broken configuration, or incomplete tests. This skill guides Claude, Codex, and Claude Code through diagnosis, fix planning, validation, and escalation.
DevOps & Infrastructure View
Related Skills
View all📦
supabase
81Build Supabase Apps Safely
by supabase
Supabase projects change quickly, and outdated guidance can create database or auth defects. This skill directs Claude, Codex, and Claude Code to verify docs, use safe workflows, and check Supabase security concerns.
DevOps & Infrastructure View
📦
alembic
78Manage Alembic Database Migrations
by bossjones
Database schema changes are risky when teams lack repeatable migration patterns. This skill gives Claude, Codex, and Claude Code practical Alembic guidance for SQLAlchemy projects.
DevOps & Infrastructure View
📦
supabase-postgres-best-practices
80Optimize Supabase Postgres Performance
by supabase
Slow queries and schema drift can make Postgres apps hard to scale. This skill gives AI agents Supabase-backed rules for indexes, RLS, pooling, and diagnostics.
Data & Analytics View
📦
postgres-best-practices
80Optimize Postgres Queries and Schemas
by sickn33
Slow queries and unsafe database patterns are hard to catch during ordinary code review. This skill gives Claude, Codex, and Claude Code structured Postgres guidance for indexes, RLS, pooling, transactions, and diagnostics.
Data & Analytics View
📦
postgresql-optimization
80Optimize PostgreSQL Performance
by sickn33
Slow PostgreSQL systems need structured analysis before changes. This skill guides query tuning, index planning, configuration review, maintenance, and monitoring.
Data & Analytics View
📦
code-consistency-validator
79Validate Cross-Language Type Consistency
by BarisSozen
Cross-language type drift can cause precision loss and contract bugs. This skill guides Claude, Codex, and Claude Code through Rust, TypeScript, and PostgreSQL checks.
Coding & Development View