Migration Auditor

    3

    Catches dangerous database migrations before they hit production. Reviews schema changes for locking hazards, data loss, missing rollbacks, and index issues across PostgreSQL, MySQL, and SQLite.

    $5

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    1 useSecurity scanned

    Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+21 more

    migration-auditor

    Example session with this skill installed

    I'm about to deploy a PR that drops the legacy_id column from the orders table and adds an index to the customer_id column on our Postgres 15 database. Can you review these migrations?

    • Read your context and instructions
    • Compiled the migration-auditor

    Migration Audit: FAIL

    • [FAIL] CREATE INDEX: Missing CONCURRENTLY on "orders" (50M rows).
    • [WARN] DROP COLUMN "legacy_id": Confirm code isn't reading.
    • [FIX] Rewritten migration provided with CONCURRENTLY and two-phase drop strategy for PostgreSQL 15.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Every team has a story about a migration that took down production. A column drop that wasn't actually unused. An index creation that locked a 50M-row table for 20 minutes during peak traffic. A NOT NULL constraint added to a populated table that blew up on deploy.

    Migration Auditor catches these before they happen.

    Point it at your migration files and it runs a 30+ point checklist covering destructive operations, locking hazards (engine-specific), missing or broken rollbacks, data integrity risks, index issues, migration ordering problems, environment-specific gotchas, and transaction safety.

    It doesn't just flag problems. It writes the corrected migration code for you.

    Works with Rails, Django, Laravel, Prisma, Drizzle, Knex, TypeORM, Sequelize, Flyway, Liquibase, and raw SQL. Covers PostgreSQL, MySQL/MariaDB, and SQLite with engine-specific rules (because locking behavior between them is completely different).

    What it catches that generic code review doesn't:

    • ADD COLUMN NOT NULL DEFAULT is dangerous on PostgreSQL < 11 but safe on 11+ (fast default). The skill checks your PG version.

    • CREATE INDEX without CONCURRENTLY blocks writes on large tables. The skill flags this and rewrites it.

    • MySQL ALTER TABLE copies the entire table for most DDL. On large tables, the skill recommends pt-online-schema-change or gh-ost instead.

    • Rollbacks that exist but don't actually reverse the forward migration. An empty down method on a destructive migration is a failure, not a pass.

    • Foreign key constraints added without NOT VALID on PostgreSQL, which locks the table for a full validation scan.

    • Migrations that are safe on your 50-row dev database but will lock a 50M-row production table for minutes.

    Output is a structured audit report with pass/warn/fail for each check, concrete fixes for every issue, and a recommended deploy order if you're running multiple migrations.

    • Cannot accurately predict lock duration without table size metadata.
    • Limited detection of dynamic SQL builders in complex app code.
    • Cannot verify if external backups actually exist.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before any payment.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    1 use

    Times used to date

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 7 months ago

    Permissions

    No special permissions declared or detected

    Listed7 months ago

    What's inside

    Frequently Asked Questions

    The auditor determines your database engine (PostgreSQL, MySQL, or SQLite) and version to apply specific rules. For example, it knows that adding a column with a default is safe in PostgreSQL 11+ but requires a table-locking rewrite in older versions, or that MySQL requires specialized tools like gh-ost for large table ALTERS.

    The skill supports all major frameworks including Rails (ActiveRecord), Django, Laravel, Prisma, Drizzle, Knex, TypeORM, and Sequelize. It also audits raw SQL files and tools like Flyway or Liquibase by analyzing the DDL statements directly.

    Yes. It identifies "Locking Hazards" such as creating indexes without the CONCURRENTLY keyword in PostgreSQL or operations that trigger full table copies in MySQL. It provides specific warnings and alternative code (like a two-phase deploy strategy) to keep your database online.

    For every flagged issue, the auditor provides a 'concrete fix.' This includes rewriting SQL for safe index creation, suggesting the correct order for adding NOT NULL constraints to populated tables, or generating the missing rollback code to ensure reversibility.

    New in Data & Databases