backend-migrations
Plan Safe Backend Migrations
Schema changes can break deployments when rollback, locking, and compatibility are missed. This skill helps plan and review backend migrations for safer database evolution.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "backend-migrations" from https://skillstore.io/skills/eis-its-backend-migrations.md and its manifest at https://skillstore.io/api/skills/eis-its-backend-migrations/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "backend-migrations". Add a nullable customer status column to the accounts table.
Expected outcome:
- A migration plan that adds the column before application code depends on it.
- A rollback note that removes the column only after dependent code is reverted.
- A short checklist for defaults, indexes, and existing records.
Using "backend-migrations". Review a migration that drops an orders column during a release.
Expected outcome:
- A risk review that flags compatibility and rollback concerns.
- A safer phased approach using deprecation, code cleanup, and delayed removal.
- Questions about dependent services, reports, and data retention.
Using "backend-migrations". Plan an index for a high-traffic user lookup.
Expected outcome:
- An index rollout plan focused on lock risk and query performance.
- Validation steps for query plans and production impact.
- Rollback guidance if the index causes deployment or runtime issues.
Security Audit
High RiskThe skill contains a path traversal reference from SKILL.md to a file outside the skill directory. No prompt injection text was found in the reviewed file, but the external instruction dependency is not auditable from this package.
Confirmed security concerns (1)
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
📁 Filesystem access (1)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/eis-its-backend-migrations/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/eis-its-backend-migrations?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/eis-its-backend-migrations?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/eis-its-backend-migrations/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/eis-its-backend-migrations.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
EIS-ITS. (2026). backend-migrations security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/eis-its-backend-migrations/audits/10BibTeX citation
@techreport{eis-its-eis-its-backend-migrations-2026,
author = {EIS-ITS},
title = {backend-migrations security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/eis-its-backend-migrations/audits/10},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "backend-migrations security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "EIS-ITS"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/eis-its-backend-migrations/audits/10"
identifiers:
- type: other
value: "skillstore:eis-its-backend-migrations:audit:10"
description: "Skillstore immutable audit report identifier"
Compare variants
2 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
devanb-backend-migrations
2026-08-21
eis-its-backend-migrations
2026-08-21
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Plan a Table Change
Prepare a reversible migration before adding, renaming, or removing database fields.
Prepare a Safe Release
Check migration order, compatibility, and rollback needs before a production deployment.
Review Migration Risk
Assess migration files for data integrity, reversibility, and schema version control.
Try These Prompts
Use the backend-migrations skill to plan a reversible migration for adding [field] to [table]. Include rollout, rollback, and data integrity checks.
Use the backend-migrations skill to review this proposed schema change: [describe change]. Identify compatibility risks and rollback concerns.
Use the backend-migrations skill to design a zero-downtime rollout for [migration goal]. Include phased deployment steps and validation checks.
Use the backend-migrations skill to audit these migration files before release: [summarize files]. Prioritize blocking risks and required fixes.
Best Practices
- Create reversible migrations and document the rollback path before merge.
- Separate schema changes from data backfills when either step can fail independently.
- Plan destructive changes as phased releases with compatibility checks.
Avoid
- Dropping columns in the same release that removes application references.
- Combining large data rewrites with structural schema changes.
- Adding indexes to large production tables without lock and performance planning.