ips-migration — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ips-migration (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Migrate an IP-Symcon object subtree from a source instance to a target instance: carry structure, logic and module instances across, and rewire every ID reference so the copy actually works on the new system. This is the agentic counterpart to the deterministic ips_export_subtree / ips_import_subtree primitives — it orchestrates them, then does the reasoning the primitives deliberately don't (instances, references, flagging).
REQUIRED BACKGROUND: the ipsymcon skill — same MCP, same plan-before-you-touch rule, and the same optional instance parameter on every tool (read from source, write to target). This skill is migration-specific orchestration layered on top of it.
Does: greenfield migration (target empty/fresh) — recreate categories, variables, scripts, events, links and instances under a target parent, and remap every ID reference (script object IDs, link targets, event triggers, instance configuration) through one old→new id_map. Plan-first, write-gated, verified by re-export.
Does not:
instance to an existing one) — that is a later skill. v1 assumes greenfield.
it never "improves" anything silently.
the missing ones (a missing module blocks its instances).
Faithful-but-flagged, not blind 1:1. v1 transports correctly and surfaces what looks wrong; deciding what to fix is the human's (or the later refactoring skill's) call.
read (source) → plan + flag (NO writes) → approve → two-pass write → verify
(1: create all
2: wire references)The full step-by-step, the exact ips_call recipes, the flag catalogue and the plan/report templates live in [references/workflow.md](references/workflow.md). The IP-Symcon function signatures are in the ipsymcon skill's [ips-functions.md](../ipsymcon/references/ips-functions.md).
and STOP for approval before any write. Same gate as the ipsymcon skill; IP-Symcon runs a real house.
wire references. A reference can point to an object that gets created later — one pass cannot work.
in the id_map → leave it as-is and flag it for manual fixing. Do not invent a target.
ID. Only remap IDs inside known ID-bearing calls (GetValue(<id>), SetValue(<id>,…), etc.), and show every proposed script edit in the plan for review.
IPS_ENABLE_WRITE. Run against the target test/staging first; anIP-Symcon backup is the safety net, the plan is the primary guardrail.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.