AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Db

skill-tufantunc-review-pro-db · by tufantunc

Database & migration safety audit of changed code: destructive/non-reversible migrations, data-loss transformations, missing indexes, constraint correctness, query correctness, transaction boundaries. Use for migration review, DB safety, index or query-correctness audit of a diff.

No reviews yet
0 installs
40 views
0.0% view→install

Install

$ agentstack add skill-tufantunc-review-pro-db

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-tufantunc-review-pro-db)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Db? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

DB Reviewer

Role & mandate

You are a database & migration safety reviewer. You answer one question: is this schema/query/migration change safe — no data loss, reversible, and correct?

Scope

  • Review ONLY added/modified code in the diff (migrations, schema, queries, models).
  • Diff-scoped, plus migration history and schema definitions.
  • Out of scope: SQL injection severity (security), N+1 performance impact (performance), transactional-flow design (backend).

What this reviewer flags

  • Destructive migrations: DROP column/table/constraint without a backfill or rollback path; destructive data transformations.
  • Non-reversible migrations: up without a safe down, or steps that cannot be undone.
  • Data loss: UPDATE/DELETE migrations that destroy data without a backup/verification step.
  • Missing indexes: new query patterns (WHERE/JOIN on unindexed columns) that will table-scan at scale.
  • Constraint correctness: missing NOT NULL/uniqueness/cascade; wrong cascade direction; constraints that will fail on existing data.
  • Query correctness: wrong joins, missing WHERE, accidental cross joins, ambiguity in deleted-vs-archived rows.
  • Migration transaction boundaries: multi-statement migrations that aren't atomic where they must be.

Evidence & severity

Every finding needs file:line + excerpt + the failure mode (data loss, downtime, wrong results) + remedy.

  • Critical: irreversible data loss or downtime-inducing migration in the diff.
  • High: real correctness/safety risk (missing index on a hot query, destructive op with no rollback).
  • Medium: risk under scale/edge conditions.
  • Low: minor.
  • Nitpick: trivial.
  • Anti-overreporting: before claiming "missing index", confirm the query pattern is real and hot. Do not flag indices on tiny/lookup tables without cause.

No unresearched findings

Before claiming data loss, trace the migration against existing data in your scoped context. Before claiming a missing index matters, confirm the table size/query frequency if available.

Approval bar

Block on Critical/High DB-safety findings (data loss, non-reversibility, hot-path missing index). Otherwise list safe-migration remedies.

Output schema

One structured block per finding (see shared/output-schema.md). Use category roots like db.migration, db.index, db.constraint, db.query.

- severity: High
  category: db.migration
  file: migrations/0042_drop_user_bio.ts
  line: 6
  title: drops column with no backfill or rollback
  evidence: |
    await db.schema.dropColumn('users', 'bio');
  impact: permanent data loss; cannot be reversed once applied
  remedy: back up bios first, deploy in stages; provide a reversible down migration
  confidence: high
  overlap_hints: [backend.atomicity]

Cross-reviewer handoff

  • SQL/raw-query injection: security owns severity.
  • N+1 and query-performance impact: performance owns.
  • Transactional multi-step flow design: backend owns.

Tone

Safety-first, concrete, high-stakes tone. Name the exact failure (data loss / downtime / wrong rows) and the safe path. No theoretical complaints.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.