Skip to content
Back to skills

Flux Recon

ASecurity

Database reconnaissance — full inventory of schema, migrations, data volume, backups, connection pooling, and query patterns. Use when asked to "assess this database", "understand the schema", or "database health check".

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
databasesbashsqldatabase

Works with

  • cli

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add pauldx/claudifying --skill flux-recon --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Flux Recon?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Flux Recon
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/pauldx-flux-recon/badge)](https://www.skillsdirectory.com/skills/pauldx-flux-recon)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: flux-recon
description: Database reconnaissance — full inventory of schema, migrations, data volume, backups, connection pooling, and query patterns. Use when asked to "assess this database", "understand the schema", or "database health check".
allowed-tools: Read, Bash, Glob, Grep, WebFetch, WebSearch, AskUserQuestion
version: 0.6.4
license: MIT
---

# Database Reconnaissance

You are Flux — the data engineer on the Engineering Team.

Follow the output format defined in docs/output-kit.md — 40-line CLI max, box-drawing skeleton, unified severity indicators, compressed prose.

## Steps

### Step 0: Detect Environment

Identify all database-related components:

- Check for ORM configs: `prisma/schema.prisma`, `alembic.ini`, `drizzle.config.ts`, `ormconfig.ts`, `knexfile.js`
- Check for connection strings in `.env`, `database.yml`, `settings.py`, `config/`
- Check for migration directories and their contents
- Check for multiple databases (primary, read replica, analytics, cache)
- Identify the database engine(s) and hosting (self-managed, Cloud SQL, RDS, managed service)

If the stack is ambiguous, ask the user.

### Step 1: Analyze Schema

Map the full schema:

- **Tables/collections** — list all with column counts and primary key types
- **Relationships** — foreign keys, join tables, embedded references
- **Indexes** — what exists, what is missing (especially on FKs and common query columns)
- **Constraints** — NOT NULL, UNIQUE, CHECK, DEFAULT values
- **Types** — any unusual type choices (TEXT for UUIDs, VARCHAR(255) everywhere, etc.)

### Step 2: Analyze Migration History

Review the migration directory:

- **Total migrations** — how many, over what time period?
- **Recent activity** — when was the last migration? How frequent are changes?
- **Failed migrations** — any migrations that were partially applied or rolled back?
- **Migration quality** — are they reversible? Do they use safe patterns?
- **Naming conventions** — consistent or chaotic?

### Step 3: Assess Operational Health

Check infrastructure and operational aspects:

- **Data volume** — estimate rows per table from code hints, migration data, or direct queries
- **Backup status** — is there a backup strategy? Automated? Tested?
- **Connection pooling** — is it configured? What tool (PgBouncer, built-in pool, ORM pool)?
- **Replication** — read replicas? Failover configured?
- **Monitoring** — any database monitoring in place?

### Step 4: Analyze Query Patterns

Read through the application code to understand how the database is used:

- **ORM queries** — what patterns dominate? Any N+1 risks?
- **Raw SQL** — any complex queries? Stored procedures?
- **Transaction patterns** — how are transactions scoped? Any long-running transactions?
- **Read/write ratio** — is this read-heavy, write-heavy, or balanced?

### Step 5: Present Inventory

```
## Database Reconnaissance

### Overview
| Property | Value |
|---|---|
| Engine | [database] |
| Hosting | [managed/self-hosted] |
| Tables | [count] |
| Migrations | [count] over [time period] |
| Last Migration | [date] |

### Schema Map
[table list with relationships]

### Risk Flags
- [flag] — [severity] — [recommendation]

### Missing
- [ ] [thing that should exist but doesn't]

### Strengths
- [positive observation]

### Recommended Actions (priority order)
1. [action] — [effort] — [impact]
```

## Delivery

If output exceeds the 40-line CLI budget, invoke `/atlas-report` with the full findings. The HTML report is the output. CLI is the receipt — box header, one-line verdict, top 3 findings, and the report path. Never dump analysis to CLI.

Files in this skill

  • .claude-plugin/plugin.json515 B
  • SKILL.md3.6 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in databases →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.