migrate-validate
Validate pending migrations for foreign key consistency, rollback safety, and best practices
How do I install this agent skill?
npx skills add https://github.com/ruvnet/ruflo --skill migrate-validateIs this agent skill safe to install?
- Gen Agent Trust Hubwarn
The skill validates database migrations but introduces a potential security risk by suggesting the execution of a remote package from an unverified source (@claude-flow/cli) via npx. Additionally, it processes external SQL migration files without explicit sanitization, which creates a surface for indirect prompt injection.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
What does this agent skill do?
Migrate Validate
Validate all pending database migrations for correctness, safety, and adherence to best practices.
When to use
Before applying migrations to catch issues early -- foreign key references to non-existent tables, missing rollback SQL, destructive operations without safeguards, and naming convention violations.
Steps
- Find pending migrations -- use
Globto list all migration files, cross-reference with applied history viamcp__plugin_ruflo-core_ruflo__memory_search --namespace migrations(ormemory_list) to identify pending ones. Thememory_*tool family routes by namespace;agentdb_hierarchical-*does NOT (it routes by tier), so usememory_*here. - Parse SQL -- use
Readto load each pending.up.sqland.down.sqlfile and parse the SQL statements - Check foreign keys -- verify that all REFERENCES targets exist in the current schema or in prior migrations (both applied and pending)
- Check NOT NULL defaults -- verify that any ADD COLUMN with NOT NULL has a DEFAULT value
- Check rollback completeness -- verify every CREATE/ALTER in the UP file has a corresponding DROP/ALTER in the DOWN file
- Flag destructive ops -- warn on DROP TABLE, DROP COLUMN, TRUNCATE without explicit confirmation
- Check idempotency -- verify IF EXISTS / IF NOT EXISTS is used for safety
- Check naming -- verify table names are plural, column names are snake_case, index names follow
idx_table_columnconvention - Store validation patterns -- two paths (per ruflo-cost-tracker ADR-0001 dual-path pattern):
- Pattern store (typed, recommended):
mcp__plugin_ruflo-core_ruflo__agentdb_pattern-storewithtype: 'migration-validation'. No namespace arg — ReasoningBank routes it. - Plain store (namespace-routable):
mcp__plugin_ruflo-core_ruflo__memory_store --namespace migrationsfor validation results tied to a specific migration number.
- Pattern store (typed, recommended):
- Report -- display: errors (must fix), warnings (should fix), info (suggestions), with file path and line number for each issue
CLI alternative
npx @claude-flow/cli@latest memory search --query "migration validation results" --namespace migrations
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/ruvnet/ruflo/migrate-validate">View migrate-validate on skillZs</a>