360 Secure SkillHub
360 安全技能中心

trace-configuration-file-migrations

面向配置文件、工作区或指令文件在升级后消失的场景,指导先核对本地状态与备份,再追溯上游提交和发布时序,阅读迁移代码并比对文档模板,最后按结论、时间线、原因、迁移与恢复、本地结果和残留引用报告。强调以源码和可验证不变式为准,无法核验时标记未知。

nextaltair
nextaltair
热度 12.14
最近更新 2026-09-02 16:45:28
分类:开发依赖:读写文件应用场景:调试排错 / 研究 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add trace-configuration-file-migrations
Metadata
name
trace-configuration-file-migrations
description
Trace removed or relocated config files across source, releases, migration code, and local state without mistaking relocation for deletion.

Trace configuration-file migrations

Use when a config, workspace, or instruction file disappears after an upgrade and the task is to explain what changed, when, why, and whether local data survived.

Procedure

  1. Inspect current local state first.

    • Test whether the old file exists.
    • Locate the replacement section or file.
    • Record modification times for the replacement and any migration backup.
    • Hash the backup when integrity matters.
  2. Establish upstream intent.

    • Find the introducing PR or commit.
    • Inspect its changed-file list before opening large diffs.
    • Read the PR description and only the relevant source, template, and documentation files.
  3. Establish release timing.

    • Read tag name and publication time from release metadata.
    • Do not rely on a truncated release body as proof.
    • Distinguish merge date, first packaged prerelease, and later migration refinements.
  4. Read migration code, not only release notes.

    • Identify the source file, destination, backup/archive path, deletion point, and failure ordering.
    • Check how empty or stock templates differ from customized content.
    • Check whether runtime retains a fallback reader for the legacy file.
    • Check migration scope: workspace root, multiple agents, or nested directories.
  5. Compare docs and templates with implementation.

    • Confirm the new canonical location and whether it controls behavior or merely supplies model guidance.
    • Treat source as decisive for edge cases; use docs for the supported contract.
  6. Audit stale custom guidance.

    • Search active instruction files for references to the legacy path.
    • Inspect rewrite tables when migration updates known wording.
    • Expect exact-match rewrites to miss custom paraphrases; report those separately from data migration.
  7. Report in this order:

    • conclusion: deleted, relocated, merged, or unsupported;
    • timeline: merge, release, later refinements;
    • rationale;
    • migration behavior and recovery path;
    • verified local outcome;
    • remaining stale references or out-of-scope nested files.

Pitfalls

  • File absence alone does not prove data loss.
  • Release notes alone do not establish migration ordering or rollback behavior.
  • A backup alone does not prove destination content was written.
  • Successful root migration does not prove nested files were migrated.
  • Automated wording rewrites may cover stock text but leave customized guidance contradictory.
  • Large API responses can truncate the only relevant evidence; narrow by changed path or metadata.

Verification

Verify all applicable invariants:

  • the legacy root file is absent or intentionally retained;
  • migrated content appears at the documented destination;
  • the backup exists and its hash is stable;
  • timestamps align with the migration event;
  • current docs name the destination;
  • migration source confirms archive/write/delete ordering;
  • active instructions contain no unreported legacy references.

If any invariant cannot be checked, label it unknown rather than inferring success.