templates — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited templates (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
To scaffold a containerized local development ecosystem that connects an npm backend server to a Dockerized PostgreSQL instance via an ORM, establishing automated, version-controlled database migrations.
Sequelize (case-insensitive)..claude_history/setup_status.md in the project root with the chosen ORM, DB connection string, and initialization checklist. If you do not have write access, print the exact commands and file contents to create or update that file and ask the user to confirm.If running as an agent with filesystem access, execute the following commands and report results. Otherwise, print the exact shell commands and file contents and ask the user to run them.
docker --version and docker-compose --version.package.json exists: npm init -ynpm install expressnpm install @prisma/client and npm install -D prismanpm install sequelize pg pg-hstore and npm install -D sequelize-clinodemon for development, also run npm install -D nodemonpackage.json contains a dev script. If absent, add one before running:npm pkg set scripts.dev "node server.js"npm pkg set scripts.dev "nodemon server.js"npx prisma init (generates /prisma/schema.prisma and updates .env)npx sequelize-cli init (generates /models, /migrations, /seeders, /config)Generate the following configuration blocks using this exact variable map template:
DB_USER=postgresDB_PASSWORD=postgresDB_HOST=localhostDB_PORT=5432DB_NAME=app_dbHOST_DB_PORT=5432docker-compose.ymlpgdata).${HOST_DB_PORT} to container port 5432..env should use DB_HOST='localhost' and DB_PORT='${HOST_DB_PORT}'.DB_HOST to the compose service name and DB_PORT to 5432..env)DATABASE_URL="postgresql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME}?schema=public"
.env values for DB_USER/DB_PASSWORD/DB_HOST/DB_PORT/DB_NAME, and show the exact command to test the connection:psql postgresql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME} -c '\l'
package.json contains typescript or tsconfig.json exists, prefer prisma/seed.ts and add a seed script using ts-node.seed.js and add a seed script using node.User or HealthCheck model inside prisma/schema.prisma._prisma_migrations or SequelizeMeta) already exists, do not run the initial init migration. Instead detect the table and either:server.js)const prisma = new PrismaClient()).await prisma.user.findFirst() or await prisma.$executeRaw('SELECT 1') only if necessary.await sequelize.authenticate().Do not mark this skill as complete until the entire stack passes this operational gate:
docker-compose up -d.docker-compose up -d, wait for PostgreSQL to accept connections with a retry loop:pg_isready or a TCP connect to ${DB_HOST}:${DB_PORT}._prisma_migrations or SequelizeMeta already exists, do not run the initial init migration. Prompt for a baseline migration or marking migrations as applied.npx prisma migrate dev --name initnpx sequelize-cli db:migrate_prisma_migrations or SequelizeMeta) exists in the container.npx prisma generate explicitly.package.json has a dev script, then start the server and hit /health to confirm the ORM client can read the database schema..claude_history/setup_status.md.Handle failures in a flat deterministic sequence with explicit retries:
docker or docker-compose is not found, run docker --version and docker-compose --version, then instruct: "Install Docker Desktop (https://www.docker.com/products/docker-desktop) or run your platform's Docker install instructions." Abort until Docker is available.pg_isready or TCP connect up to 15 attempts with 2s backoff. If still failing, collect container logs and fail with exact diagnostic output..env values for DB_USER/DB_PASSWORD/DB_HOST/DB_PORT/DB_NAME, and show:psql postgresql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME} -c '\l'
schema.prisma or use a DB user with CREATEDB privileges. Show the exact schema snippet and env var to add.npm run dev is not available, add the dev script via npm pkg set scripts.dev "node server.js" or npm pkg set scripts.dev "nodemon server.js" before retrying.setup_error.log) with the exact CLI error output.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.