app-platform-migration
An agent skill by digitalocean-labs, from digitalocean-labs/do-app-platform-skills. Tags: app-platform, deployment, development, digitalocean, migration, refactoring.
What it does
Migrate applications from Heroku, AWS, Render, Railway, Fly.io, or Docker Compose to DigitalOcean App Platform. Use when converting existing apps, mapping services, refactoring platform-specific code, or creating app specs from other platform configurations.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add digitalocean-labs/do-app-platform-skills --skill app-platform-migrationOr copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/digitalocean-labs/do-app-platform-skills
cp -r do-app-platform-skills/skills/migration ~/.claude/skills/app-platform-migrationSafety box score
Grade C, moderate risk: 39 of 100 risk points, rated 2026-09-21. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is a repository-migration tool that analyzes an app, generates App Platform specs, edits code, creates branches, and can push/deploy those changes. The main risks are broad remote-side effects (git push, GitHub secrets, DigitalOcean app/database creation) and the fact that its analyzers will read `.env`-style files if present.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 2 (moderate) | It ships and invokes Python scripts such as `scripts/detect_platform.py`, `scripts/analyze_architecture.py`, and `scripts/generate_app_spec.py`, and its workflows call shell tools like `git`, `doctl`, `gh`, and `pg_restore`. |
| Network access | 2 (moderate) | The workflow explicitly uses remote operations like `git clone`, `git push origin migrate/test`, `gh api --method PUT repos/:owner/:repo/environments/staging`, and `doctl apps create --spec .do/app.yaml`. |
| Filesystem reach | 1 (low) | It writes and edits files in the repository, including `.do/app.yaml`, `.do/deploy.template.yaml`, `MIGRATION.md`, `.env.example`, and refactored source files, but does not target system paths or dotfiles outside the project. |
| Secrets & credentials | 2 (moderate) | `scripts/analyze_architecture.py` scans any file whose name contains `.env`, and the docs repeatedly route sensitive values into GitHub Secrets and environment variables such as `DIGITALOCEAN_ACCESS_TOKEN` and `SPACES_SECRET`. |
| Privilege & persistence | 0 (none) | There is no use of `sudo`, global installs, service registration, shell startup modification, or other OS-level privilege changes. |
| Instruction hijack surface | 0 (none) | The files do not contain prompt-injection patterns like instructions to ignore rules, hide behavior, or follow remote instructions. |
| Irreversible actions | 3 (high) | The skill can create branches, commit, push, create DigitalOcean databases and apps, and hand off deployment steps; those are broad external actions with cost and production impact, as shown by `git push origin migrate/test` and `doctl databases create ...`. |
| Transparency | 0 (none) | All reviewed files are plain text; there are no binaries, bundled installers, or decoded-at-runtime blobs. |
Before installing
- Review `scripts/analyze_architecture.py` for `.env` scanning before pointing it at a real repo.
- Run the skill on a scratch clone or non-production branch first.
- Use a DigitalOcean and GitHub account with minimal permissions before allowing `git push` or `doctl apps create`.
- Check the generated `.do/app.yaml` before any deploy, especially database and secret bindings.
Rated 2026-09-21 by an automated review of 17 files from the skill's repository.
Source
- Repository
- digitalocean-labs/do-app-platform-skills (all skills from this repository)
- Path
- skills/migration/SKILL.md
- Branch
- main
- Collection
- do-app-platform
- Updated
- 2026-09-21
Related skills
- app-platform-router — Routes DigitalOcean App Platform tasks to specialized sub-skills.
- principle-migrate-callers-then-delete-legacy-apis — Apply when introducing a new internal API while old callers still exist.
- app-platform-designer — Transform natural language application descriptions into production-ready DigitalOcean App Platform specifications.
- app-platform-troubleshooting — Debug running App Platform applications by accessing containers, analyzing logs, running diagnostics, and applying fixes.
- deployment — Deploy applications to DigitalOcean App Platform via GitHub Actions with proper environment management and secrets handling.
- devcontainers — Set up local development environments with production parity for DigitalOcean App Platform.