convex-security-check

Audit Convex applications for authentication, function exposure, and access controls.

Updated Nov 2, 2025

Search Tags:#authorization #security #authentication #validation #audit #functions #convex

Ready to run

npx skills add https://github.com/cpmappstudio/cpca-sports --skill convex-security-check-cpmappstudio

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/cpmappstudio/cpca-sports/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/cpmappstudio/cpca-sports --skill convex-security-check-cpmappstudio

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex applications often suffer from gaps in authentication, authorization, function exposure, and data validation, which can lead to security vulnerabilities and compliance risks.

Core Features & Use Cases

Authentication checks: verify user identity and enforce secure session handling across queries and mutations.
Function exposure management: enforce internal vs public separation and protect HTTP actions.
Argument and return validation: apply explicit validators to prevent misuse and data leakage.
Row-level access control: enforce ownership and role checks before data access or modification.
Environment variable hygiene: ensure secrets are not hard-coded and are loaded securely.

Quick Start

Use the Convex Security Check to audit your Convex project and identify gaps in authentication and authorization.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit authentication and access controls in my Convex application?▼

Audit Convex applications by verifying user identity, enforcing secure session handling across queries and mutations, and checking row-level access controls to identify authentication and authorization gaps.

What is the best way to secure exposed Convex serverless functions during development?▼

Secure Convex serverless functions by enforcing internal vs public separation and protecting HTTP actions. This prevents unauthorized access and mitigates potential data leakage vulnerabilities.

How does argument validation prevent data leakage in Convex mutations?▼

Argument validation prevents data leakage in Convex mutations by applying explicit validators to function inputs. This ensures only properly formatted data is processed, stopping misuse and unauthorized access.

Can I check for hard-coded secrets and environment variable hygiene in a Convex project?▼

Yes, you can check environment variable hygiene in a Convex project to ensure secrets are not hard-coded. The audit verifies that sensitive variables are loaded securely.

Does the Convex security check verify role-based access before data modification?▼

Yes, the Convex security check verifies role-based access by enforcing ownership and role checks before allowing any data access or modification within your application's database operations.