convex-security-check

Audit Convex applications for authentication, access control, and validation.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/debsouryadatta/memo-hack --skill convex-security-check-debsouryadatta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/debsouryadatta/memo-hack/tree/main/.agent/skills/convex-security-check
Command: npx skills add https://github.com/debsouryadatta/memo-hack --skill convex-security-check-debsouryadatta

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers proactively identify and mitigate common security vulnerabilities in their Convex applications, ensuring data integrity and user trust.

Core Features & Use Cases

  • Comprehensive Checklist: Covers authentication, function exposure, argument validation, row-level access control, and environment variable handling.
  • Code Examples: Provides practical TypeScript snippets demonstrating secure patterns for each security aspect.
  • Use Case: A developer can run this Skill to get a structured audit of their Convex backend, ensuring all critical security bases are covered before deployment.

Quick Start

Use the convex-security-check skill to review the security of your Convex application functions.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex backend for common security vulnerabilities?

Row-level access control in Convex restricts data access based on user identity. This checklist helps you implement and audit these controls, ensuring your backend queries and mutations properly validate row-level permissions before returning data.

How do I secure authentication and row-level access control in Convex?

Securing Convex authentication and row-level access control involves checking user identity before returning data. This checklist audits your authentication setup and provides secure TypeScript patterns for implementing row-level permissions in your queries and mutations.

Does this Convex security checklist cover environment variable management?

Yes, this Convex security checklist covers environment variable management. It audits how your application handles sensitive environment variables, ensuring they are properly secured and not exposed through your backend functions.

What is the best way to validate arguments and restrict function exposure in Convex?

The best way to validate arguments and restrict function exposure in Convex is through a structured security audit. This checklist provides TypeScript examples demonstrating secure patterns for argument validation and controlling internal versus external function visibility.