serdes-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited serdes-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
End-to-end workflow for exporting Metabase content as YAML, validating it, editing it, and importing it back.
All commands require the :ee alias since export, import, and checkers live in enterprise code.
You need MB_DB_CONNECTION_URI set to point at the target Metabase Postgres database when importing. The running dev instance's connection string is in the worktree environment (check the nREPL or startup output).
clojure -M:run:ee export /path/to/export-dirFlags:
-c 123,456 - export only specific collection IDs-f - include field values-e - continue on errorThis writes YAML files in the serdes directory layout:
databases/<db-name>/<db-name>.yaml
databases/<db-name>/schemas/<schema>/tables/<table>/<table>.yaml
databases/<db-name>/schemas/<schema>/tables/<table>/fields/<field>.yaml
collections/<eid>_<slug>/cards/<eid>_<slug>.yamlAlways run both checkers after any modification. They skip full Metabase startup (~8s each).
clojure -M:run:ee --mode checker --checker structural --export /path/to/export-dirValidates YAML shapes against Malli schemas. Catches typos, missing required fields, wrong types.
clojure -M:run:ee --mode checker --checker cards --export /path/to/export-dirValidates that card queries resolve correctly against exported metadata (tables, fields, FKs). Uses Lib under the hood.
Additional cards checker flags:
--lenient - fabricate metadata on demand (when no database schema files exist)--manifest /path/to/manifest.yaml - write manifest of all referenced entities (lenient mode only)--output /path/to/results.edn - write detailed results to fileSee the serdes-yaml-edit skill for guidance on editing YAML files. The critical rule: run both checkers after every edit before proceeding.
MB_DB_CONNECTION_URI="postgres://user:pass@localhost:5432/metabase_dbname" \
clojure -M:run:ee import /path/to/export-dir -eThe -e flag continues on error. The MB_DB_CONNECTION_URI must point at the same Postgres database the running Metabase instance uses - without it, import defaults to H2 which is wrong.
clojure -M:run:ee export /tmp/metabase-exportMB_DB_CONNECTION_URI=... clojure -M:run:ee import /tmp/metabase-export -e~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.