📦
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills database-migrations-migration-observability
📦
database-migrations-migration-observability
Content revision r2 Medium Risk ⚙️ External commands🌐 Network access🔑 Env variables
Monitor Database Migrations in Real Time
Database migrations can fail without clear signals about lag, throughput, or errors. This skill designs CDC monitoring, metrics, dashboards, and alerts for migration workflows.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "database-migrations-migration-observability" from https://skillstore.io/skills/sickn33-database-migrations-migration-observability.md and its manifest at https://skillstore.io/api/skills/sickn33-database-migrations-migration-observability/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "database-migrations-migration-observability". Recommend monitoring for a PostgreSQL CDC migration.
Expected outcome:
- Track connector state, source log position, consumer lag, event throughput, and failed records.
- Alert when replication lag exceeds 60 seconds for five minutes or connector failures persist.
- Dashboard migration progress, per-table throughput, lag percentiles, and recovery status.
Using "database-migrations-migration-observability". Plan alerts for a MongoDB migration.
Expected outcome:
- Warn when throughput falls below half of the expected rate.
- Escalate when errors exceed one percent or progress remains unchanged.
- Resolve alerts only after throughput and error rates remain healthy.
Using "database-migrations-migration-observability". Add migration checks to continuous integration.
Expected outcome:
Start monitoring before the migration, run the migration, then fail the workflow when lag or error thresholds remain unhealthy.
Security Audit
Medium Riskv5 • 7/23/2026 Open versioned report
All 11 external-command alerts are false positives caused by Markdown fences or JavaScript template literals. Three examples perform outbound POST requests, including one that sends a Grafana bearer token to a configured endpoint. No prompt injection or malicious intent appears, but users should validate destinations and use least-privilege credentials.
1
Files scanned
426
Lines analyzed
3
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Mutable CI Action Reference
The workflow uses actions/checkout@v4 instead of an immutable commit SHA. A compromised or retargeted tag could introduce changed third-party code into CI.
The mutable major-version reference is directly visible in the workflow example. Pinning third-party actions by full commit SHA is the established supply-chain control.
Capability review items (3)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Python HTTP libraries
response = requests.post(
The example posts dashboard data and a bearer token to a configuration-derived Grafana URL. An untrusted or incorrect URL could receive the credential.
Low
Python HTTP libraries
response = requests.post(
The example intentionally posts connector configuration to a configured Kafka Connect endpoint. This expected operation changes an external service through a configuration-derived destination.
Low
Python HTTP libraries
requests.post(self.config['slack']['webhook_url'], json=payload)
The example intentionally sends alert content to a configured Slack webhook. This is expected alerting behavior but remains an outbound data transmission.
Risk Factors
⚙️ External commands (11)
🌐 Network access (3)
🔑 Env variables (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-database-migrations-migration-observability/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-database-migrations-migration-observability?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-database-migrations-migration-observability?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-database-migrations-migration-observability/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-database-migrations-migration-observability.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). database-migrations-migration-observability security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-database-migrations-migration-observability/audits/5BibTeX citation
@techreport{sickn33-sickn33-database-migrations-migration-observability-2026,
author = {sickn33},
title = {database-migrations-migration-observability security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-database-migrations-migration-observability/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "database-migrations-migration-observability security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-database-migrations-migration-observability/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-database-migrations-migration-observability:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Instrument a Live Migration
Add logs, progress metrics, lag measurements, and error counters to an active database migration.
Monitor a CDC Pipeline
Design Debezium and Kafka visibility for event throughput, consumer lag, and source-to-target delay.
Build Migration Alerts
Define dashboards, thresholds, notifications, and CI health gates for production migration operations.
Try These Prompts
Choose Basic Migration Metrics
Recommend essential metrics for a [database type] migration. Include progress, duration, lag, throughput, failures, and practical alert thresholds.
Design CDC Monitoring
Design monitoring for a Debezium pipeline from [source] to [target] through Kafka. Cover connector health, lag, throughput, errors, and recovery signals.
Plan Dashboards and Alerts
Create a Grafana dashboard and alert plan for [migration]. Use Prometheus metrics and separate warning, critical, and recovery conditions.
Architect Production Observability
Design end-to-end observability for [migration architecture]. Include metric definitions, label controls, CDC validation, anomaly detection, dashboards, alerts, CI gates, and rollback signals.
Best Practices
- Define baseline throughput and lag before choosing alert thresholds.
- Use bounded labels to prevent excessive Prometheus metric cardinality.
- Test dashboards, alerts, credentials, and rollback signals in a staging environment.
Avoid
- Do not expose database credentials, API tokens, or webhook URLs in logs and metrics.
- Do not treat event counts alone as proof that source and target data match.
- Do not deploy untested alert thresholds that can hide failures or create alert noise.
Frequently Asked Questions
Which databases does this skill cover?
It includes MongoDB and PostgreSQL examples, with patterns that can be adapted to other migration systems.
Does the skill deploy Prometheus or Grafana?
No. It provides instrumentation, dashboard, and provisioning patterns that require environment-specific implementation.
Can it monitor Debezium and Kafka?
Yes. It covers connector setup, event processing, consumer lag, throughput, and replication lag concepts.
Does it verify source and target data?
No. Add independent reconciliation checks for row counts, checksums, schemas, and critical business records.
How should secrets be handled?
Store secrets in an approved secret manager, restrict their scope, validate destinations, and prevent values from entering logs.
Is the generated guidance production ready?
No. Review dependencies, security, capacity, failure handling, thresholds, and rollback behavior before production use.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Ref
f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
Maintenance freshness
7/26/2026
Usage
7 downloads · 127 views
File structure
📄 SKILL.md
More from sickn33
View all📦
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
📦
senior-architect
81Review Architecture Workflows and Project Paths
Architecture reviews need a consistent starting point and clear project boundaries. This skill provides workspace-scoped tool templates, command examples, and generic design references.
Coding & Development View
📦
senior-fullstack
81Review Fullstack Project Foundations
Fullstack project setup can require many tools and checks. This skill provides basic local wrappers, common commands, and general engineering guidance.
Coding & Development View
📦
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
📦
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all📦
grafana-dashboards
78Build Production Grafana Dashboards
by wshobson
Monitoring teams need dashboards that show useful signals without noise. This skill helps create Grafana dashboards with panels, alerts, variables, and provisioning examples.
DevOps & Infrastructure View
📦
slo-implementation
78Implement SLO Programs
by wshobson
Teams need reliability goals that reflect real user experience. This skill helps define SLIs, SLO targets, error budgets, alerts, dashboards, and review routines.
DevOps & Infrastructure View
📦
appinsights-instrumentation
84Instrument Apps with Azure Application Insights
by microsoft
Application teams need consistent telemetry setup across languages and Azure hosting services. This skill provides targeted SDK, infrastructure, environment, and query guidance for Application Insights.
DevOps & Infrastructure View
📦
operating-production-services
81Operate Reliable Production Services
by Asmayaseen
Production teams need clear reliability targets and repeatable incident practices. This skill provides SLO guidance, burn-rate alert patterns, and blameless postmortem templates.
DevOps & Infrastructure View
📦
python-observability-patterns
79Add Python Observability Patterns
by 0xDarkMatter
Python services often lack consistent logging, metrics, and tracing patterns. This skill provides practical structlog, Prometheus, and OpenTelemetry examples for production applications.
DevOps & Infrastructure View
📦
project-operator
79Operate Local Project Stacks Safely
by ACSKamloops
Local development stacks can be hard to debug when logs, services, and config changes are handled out of order. This skill guides Claude, Codex, and Claude Code to inspect evidence first and explain safe operational steps.
DevOps & Infrastructure View