resync-schema — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited resync-schema (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When the user's source platform (Base44 / Lovable / Manus) added a new column or table and they want to apply the new ALTER migration without running a full redeploy, use this skill. It runs ONLY the migration pass against the currently-deployed code - no tarball download, no build, no PM2 restart.
A pre-resync database snapshot is taken automatically.
echo "$NOMETRIA_API_KEY"
echo "$NOMETRIA_TOKEN"
grep -s 'NOMETRIA_API_KEY\|NOMETRIA_TOKEN' .env .env.local 2>/dev/null
cat ~/.nometria/credentials.json 2>/dev/nullIf no token: tell the user to run /login. Stop.
Store: TOKEN="<the token>"
cat nometria.json 2>/dev/nullIf absent, use $ARGUMENTS or list migrations:
curl -s -X POST https://app.nometria.com/listUserMigrations \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $TOKEN" \
-d '{}'Store: APP_ID="<app_id>".
Before dispatching, explain what's about to happen:
Re-syncing the database schema for <APP_NAME>. This applies any new ALTER migrations from your source platform to the live database. It does NOT rebuild the app or restart services. A safety snapshot is taken first. Already-applied migrations are skipped automatically (idempotent).Confirm: "Proceed?"
curl -s -X POST https://app.nometria.com/resyncSchema \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $TOKEN" \
-d "{\"app_id\": \"$APP_ID\"}"Response:
{ "dispatched": true, "command_id": "<ssm-id>" }If dispatched === false and error === "instance_not_running" - tell the user they need to deploy the app first.
Tell the user:
Schema resync dispatched. Run/logsto watch the migration log, or/statusto see when the instance is back torunning. Migrations usually complete in 5-30 seconds depending on data size.
If they want, use /logs right now to tail the migration output.
Do all of the above. Execute the curl call and report results to the user.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.