convex-security-audit

What problem does it solve?

This Skill provides a structured approach for performing comprehensive security reviews of Convex applications, focusing on authorization logic, data access boundaries, action isolation, rate limiting, and protection of sensitive operations.

Core Features & Use Cases

• RBAC and permissions: implement role-based access control and permission checks across queries and mutations.
• Data access boundaries: enforce ownership and visibility rules to restrict data exposure.
• Audit trails: centralize and standardize logging for security-related actions.
• Rate limiting and protection: guard against abuse of APIs and sensitive operations.
• Use case: verifying admin capabilities and external API interactions with proper safeguards.

Quick Start

Run a security review of your Convex app by applying the patterns in this Skill to your authentication, authorization, and operation isolation flows.