Reviews Convex functions for security, auth, validators, and performance anti-patterns.
npx skills add https://github.com/openclaw/clawhub --skill convex-reviewer
Please help me install this Agent Skill. Skill: convex-reviewer Source: https://github.com/openclaw/clawhub/tree/main/.agents/skills/convex-reviewer Command: npx skills add https://github.com/openclaw/clawhub --skill convex-reviewer
Convex backend code can ship with missing auth checks, unindexed queries, and validator gaps that cause data leaks or slow queries. This Skill applies a structured Convex-specific review checklist so these issues are caught before deployment.
Review the code in my convex/ directory for security, performance, and validator issues before I ship it.
High-intent search queries and answers about installing and using this skill.
Run a structured review that verifies every public function calls ctx.auth.getUserIdentity(), checks resource ownership before reads and writes, and never trusts client-provided user IDs. Missing auth checks on public mutations are flagged as Critical since they risk data loss.
The main anti-patterns are using .filter() on database queries (a full table scan), missing indexes on foreign-key fields, calling Date.now() inside query handlers which breaks reactivity, and using .collect() on unbounded queries.
Scheduled functions should target internal.* rather than api.* because api functions are publicly exposed to clients. Scheduling to internal functions keeps privileged logic inaccessible from outside and is flagged as Important during review.
Yes, every public Convex function should define args and returns validators. Missing validators are flagged as Important because they weaken type safety and allow unvalidated data into mutations and queries.
Run it before shipping or merging changes to a convex/ directory, especially after adding new public mutations or queries. It catches auth gaps, unindexed queries, and validator omissions early, grouped by severity with suggested fixes.
wigxelProvision and configure Convex backend environments for web applications.
ThijmenGThNGuide Convex backend implementation with type-safe schemas and validators.
tomrfordGenerate Convex query, mutation, and action endpoints with validation and auth.
ncaqEnforce static imports over dynamic import() in TypeScript and JavaScript code.
