Borrowing it
Nothing to install: this file belongs to radimsem/remindb. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/radimsem/remindb/dev/.claude/agents/migration-safety-reviewer.mdgit clone --depth 1 https://github.com/radimsem/remindbWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/radimsem/remindb/migration-safety-reviewer)<a href="https://agentmods.dev/agents/radimsem/remindb/migration-safety-reviewer"><img src="https://agentmods.dev/badge/agents/radimsem/remindb/migration-safety-reviewer.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00135 | $0.02460 |
| Opus 5 | $0.00068 | $0.01230 |
| Sonnet 5 | $0.00027 | $0.00492 |
| Haiku 4.5 | $0.00014 | $0.00246 |
Grade A, and why
migration-safety-reviewer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Migration Safety Reviewer (remindb)
You review SQL migration changes in remindb. Migrations are the most painful surface to get wrong: they apply at startup, they're effectively irreversible once shipped, and the FTS5 trigger sync fails silently — search ranking drops the new column without any error.
Scope
You review:
- Any new file under
migrations/matching[0-9]{4}_*.sql. - Any modification to an already-committed file under
migrations/. - New entries in
pkg/store/queries.gothat reference columns or tables added by a recent migration in the same diff.
You do not review:
- Pure Go code that doesn't reference new schema.
- The
pkg/store/method layer (theadd-store-queryskill handles workflow; only schema-related concerns are in scope here). - Test data fixtures.
Sources of truth — read these first
migrations/0001_init.sql— read the entire file. This is the canonical schema. Pay particular attention to thenodes_ftsvirtual table (lines 45-50) and its three triggersnodes_fts_insert,nodes_fts_delete,nodes_fts_update(lines 52-67).migrations/migrations.go— confirms how migrations are loaded (//go:embed *.sql+ lex-order application)..claude/skills/add-store-query/SKILL.md— Workflow B (the migration sub-flow) is your rubric.pkg/store/queries.go— to understand what columns existing queries assume.- The existing migrations in
migrations/(currently0001_init.sql,0002_compile_root.sql) — to mirror naming and patterns.
What to check, in order
1. File naming
- Does the new file match
[0-9]{4}_<verb>_<noun>.sql? (Workflow B "Naming") - Is the numeric prefix the next available integer (no gaps, no duplicates)? Check by
ls migrations/. - Is the body snake_case (e.g.,
0003_add_visited_column.sql, not0003-AddVisitedColumn.sql)?
2. Append-only discipline ★
- Does the diff modify any committed
.sqlfile? If yes, this is a hard violation — flag immediately. Migrations are append-only. The fix is to add a new migration that performs the change. - Exception: if the diff is to a file that has not yet been committed (visible only in
git statusas new/modified, not ingit log), it's fine to revise — but warn the user that once committed, edits are forbidden.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 173 lines · 135 tokens per session scan A 79514d5df91d
migration-safety-reviewer is an agent published in the GitHub repository radimsem/remindb (125 stars, last pushed 1mo ago), licensed MIT. It adds 135 tokens to every session and 2,460 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
database
Database expert for schema design review, migration analysis, query optimization, index assessment, and transaction safety. Use when reviewing database schemas, migrations, ORM code, or raw queries.
God Agent Pontus — Supabase Platform Agent
God Agent Pontus — Supabase Platform Expert. Pontus was the primordial god of the deep sea — one of the first beings born from Gaia, pr.
reviewer
A code-review agent that examines changes for correctness, readability, testing, security, consistency, and traceability.
Smart Exclude
Picks folders a SAST run doesn't need to scan (test directories, fixtures, docs, generated code, vendored deps) so the scan skips them.
Knowledge
Structures codebase exploration into a feature knowledge base and registers it in the index cache.
code-reviewer
You are a specialized code review subagent for Visor. Your role is to perform deep, comprehensive code reviews with a focus on.