dev-database SKILL.md skillA
dev-database from devcodex-labs/devcodex is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add devcodex-labs/devcodex/dev-database@git:20260816.0ca777dPins git:20260816.0ca777d in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- devcodex-labs/devcodex
- Path
content/skills/dev-database/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260816.0ca777d, committed Aug 16, 2026
- First version recorded
- Jul 30, 2026
- Size
- 3,487 bytes
- Repository stars
- 432
- License
- AGPL-3.0
数据库开发子类型规范 — Migration 安全策略 + Schema 变更审查.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Dev Database Skill
## 触发条件
涉及数据库操作：Schema 变更（DDL）、Migration 文件、ORM 模型、查询优化、数据迁移。
## 执行规则
### Migration 安全策略
| 操作类型 | 要求 |
|---------|------|
| 新增列 | DEFAULT 或 NULLABLE，禁止 NOT NULL 无默认值（避免锁表） |
| 删除列 | 必须先废弃（rename/注释），至少一个版本后再删除 |
| 修改列类型 | 评估存量数据兼容性，准备回滚脚本 |
| 新建索引 | 生产环境使用 CONCURRENTLY（PostgreSQL）或 ALGORITHM=INPLACE（MySQL） |
### CP 流程
- **CP2** 必须包含：Schema ER 图 / 变更前后对比表 / 回滚方案
- **plan-review**（两阶段门禁）：PR-1 在 CP2 前自检，PR-2~PR-7 在 CP2→CP3 之间执行，PR-5③ Schema 变更属于此路径，**不进 impact-review**
- **CP3** 必须包含：上线步骤（Migration 执行时机）+ 回滚触发条件
## 产出物
- `migrations/YYYYMMDD_description.{sql|ts|js}` — Migration 文件
- `reports/requirements/` — 开发报告（含 Schema 变更说明）
## 关键约束
- 🔴 禁止在 Migration 中写业务逻辑（纯 DDL + 数据修复）
- 🔴 大表（>100万行）变更必须评估锁时间，提供在线变更方案
- 🔴 数据库、MongoDB 或数据操作连接信息默认可按用户提供内容直写或沿用项目既有模式；只有用户或项目明确指定 `config.local.json`、env、`secretRef` 或 secret manager 时，才从对应入口读取，缺失文件或字段时提醒用户补齐
- 🔴 数据补齐、迁移或跨环境写入必须执行 `DataMutationPlan`：范围来自显式清单、需求目录数据源或稳定业务键；跨环境写入不得直接用 source `_id` 匹配目标库，必须在目标环境重新唯一匹配并 dry-run 输出 `source_id`、`target_id`、缺失/重复清单；不能唯一匹配时阻断写库
…Read the whole file at its exact version.
How to install
mdr add devcodex-labs/devcodex/dev-database@sha256:dbb38c8b245ab319The line at the top of this page pins the label git:20260816.0ca777d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ij47otxzrqefw2am)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Jul 30, 2026 and Aug 16, 2026, about one every 9 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260816.0ca777d latest | 2026-08-16 | 0ca777d | 3,487 B | A | view · diff |
| git:20260813.2785b56 | 2026-08-13 | 2785b56 | 3,423 B | A | view · diff |
| git:20260730.6ee304a | 2026-07-30 | 6ee304a | 3,240 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3487 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
devcodex-labs/devcodex · 432 stars · license AGPL-3.0 · pushed 2026-10-27 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ij47otxzrqefw2am GET https://markdownregistry.com/api/v1/resolve?ref=devcodex-labs/devcodex/dev-database GET https://markdownregistry.com/api/v1/blob/dbb38c8b245ab319bdba39ad8f4331a384ab0f7ca7256115268d6d2ad156be2e
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.