Atlas / Skills / jeremylongshore / Algolia Upgrade Migration

Algolia Upgrade MigrationSAFE

skills/jeremylongshore/algolia-upgrade-migration

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Verdict
SAFE
Grade
B
Trust score
89 /100
Version
1.8.0
Hosts
1 documented
License
MIT
Stars
2,822
01

Overview

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Read from source at commit 4f83675ca38aOBSERVED · 2026-10-08
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
claude-codementioned
03

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: algolia-upgrade-migration
description: >-
  Migrate an Algolia JavaScript client integration from v4 to v5 with inventory, compatibility tests, and rollback. Use when removing initIndex, updating client methods, or reconciling mixed major versions. Trigger with "upgrade Algolia v5", "remove initIndex", or "Algolia SDK migration".
argument-hint: "[repository-path] [package-name]"
allowed-tools: Read, Glob, Grep, WebFetch, Write, Edit
version: 1.8.0
author: Jeremy Longshore <[email protected]>
license: MIT
tags:
- saas
- algolia
- upgrade
model: inherit
effort: medium
compatibility: Designed for Claude Code
---
# Algolia JavaScript v4 to v5 Upgrade

## Overview

This skill follows the official v5 migration contract and the repository's pinned dependency graph. It treats import, method, parameter, response, wait, and test changes as one controlled migration.

## Prerequisites

- A named repository, environment, and Algolia application or index in scope
- The local lockfile and installed client types as implementation authority
- A safe read-only query or explicitly disposable test target
- Current first-party documentation for any provider behavior that affects the change

## Tool Discipline

Use `Read`, `Glob`, and `Grep` to inspect local code, configuration names, tests, and dependency versions. Use `WebFetch` only for current official Algolia documentation. Use `Write` or `Edit` only after identifying the target files, constraints, and verification plan.

## Current Contract

- Version 5 removes `initIndex`; methods live on the client and receive `indexName`.
- Upgrade search-only imports and multi-search calls according to the official guide, not a mechanical rename.
- Replace chained write waits with the documented v5 wait helpers and retain task IDs.
- Check all Algolia packages, frameworks, wrappers, mocks, generated types, and examples for major-version coupling.

## Authentication

Do not change key privilege during an SDK upgrade. Use existing least-privilege test credentials only for safe verification targets.

## Instructions

1. Inventory package versions, imports, `initIndex`, client wrappers, methods, waits, mocks, and runtime targets.
2. Read the current official v5 migration guide and installed types for every used method.
3. Update the dependency and lockfile through the repository's package manager.
4. Migrate one boundary at a time, adapting parameters, responses, tasks, and errors.
5. Run type, unit, integration, build, and representative query tests; use a disposable index for writes.
6. Record compatibility gaps, final versions, release notes, rollback commit, and follow-up cleanup.

## Approval Boundaries

Do not combine the SDK upgrade with relevance, index schema, credential, or broad architectural changes unless separately scoped and tested.

## Output

Return the usage inventory, official mapping, dependency diff, migrated boundaries, test evidence, remaining v4 patterns, compatibility notes, and rollback.

## Error Handling

| Condition | Response |
|---|---|
| `initIndex` remains | Locate the call or generated artifact and migrate it. |
| Method signature differs | Follow installed v5 types and current official reference. |
| Mock passes but live test fails | Correct the application adapter contract. |
| Rollback changes lockfile only | Revert source and lockfile as one unit. |

## Examples

Use this compact input and expected handoff to calibrate scope and evidence quality.

Input:

```text
from=algoliasearch-4; to=pinned-5; initIndex-calls=9; wrappers=2
```

Expected handoff:

```text
initIndex=0; typecheck=pass; integration=pass; disposable-write-cleaned=yes
```

## Resources

- [Skill-specific official documentation](references/official-docs.md)
- [JavaScript v5 upgrade](https://www.algolia.com/doc/libraries/sdk/upgrade/javascript)
- [JavaScript API client](https://www.algolia.com/doc/libraries/javascript)
- [API keys](https://www.algolia.com/doc/guides/security/api-keys)
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (0)

No findings outside the package's declared scope.

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 4f83675ca38afull audit observations/trust-audit/skill/jeremylongshore__algolia-upgrade-migration.json · Report an issue / request a re-scan
05

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-084f83675ca38aSAFEB89first audit
06

Questions

What does the Algolia Upgrade Migration skill do?

Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.

Is Algolia Upgrade Migration safe to install?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.

What can Algolia Upgrade Migration access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does Algolia Upgrade Migration work with?

Its documentation mentions claude-code. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (4f83675ca38a), read on 2026-10-08. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement