convex-security-check

Audit Convex backend applications for authentication and access control security.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/elcokiin/peluqueria --skill convex-security-check-elcokiin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/elcokiin/peluqueria/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/elcokiin/peluqueria --skill convex-security-check-elcokiin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

This Skill addresses the critical need for security oversight in Convex-based applications by providing a structured audit path to prevent common vulnerabilities like unauthorized data access and improper function exposure.

Core Features & Use Cases

  • Security Checklist: A comprehensive audit framework covering authentication, function exposure, argument validation, row-level access control, and environment variable management.
  • Pattern Verification: Provides secure coding templates for authentication helpers, internal function usage, and ownership verification.
  • Use Case: Use this checklist during a pre-deployment code review to ensure that all public-facing functions are properly authenticated and that sensitive database operations are restricted to internal-only access.

Quick Start

Run the convex-security-check skill to audit the current project codebase against the standard security checklist.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex backend for security vulnerabilities before deployment?

Audit your Convex backend by evaluating authentication, function exposure, argument validation, and row-level access control patterns. This structured checklist verifies production-readiness and prevents unauthorized data access during pre-deployment code reviews.

What is row-level access control in Convex and how do I verify it?

Row-level access control in Convex restricts database operations to authorized users through ownership verification. Verify it by checking secure coding templates and ensuring sensitive database operations are restricted to internal-only access.

How do I secure public-facing functions in a Convex application?

Secure public-facing functions in a Convex application by applying strict argument validation and proper authentication helpers. Ensure sensitive operations remain restricted to internal-only access to prevent improper function exposure.

Can I use this security audit checklist for reactive database environments?

Yes, this security audit checklist is specifically designed for reactive database environments. It verifies secure data handling and environment variable isolation for Convex applications preparing for production deployment.

Why does my Convex app expose unauthorized data access to public functions?

Unauthorized data access in Convex apps occurs when public functions lack proper authentication and row-level access control. Audit function exposure patterns and apply ownership verification to restrict sensitive database operations to internal-only access.

Do I need environment variable isolation for Convex production-readiness?

Yes, environment variable isolation is required for Convex production-readiness. The security audit evaluates environment variable management alongside authentication and function exposure to ensure strict compliance and secure data handling.