convex-security-check

Audit Convex applications for authentication, access control, and validation issues.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/FlorinSenoner/the-dahan-codex --skill convex-security-check-florinsenoner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/FlorinSenoner/the-dahan-codex/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/FlorinSenoner/the-dahan-codex --skill convex-security-check-florinsenoner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers proactively identify and mitigate common security vulnerabilities in their Convex applications, ensuring robust protection against unauthorized access and data breaches.

Core Features & Use Cases

  • Comprehensive Checklist: Covers authentication, function exposure, argument validation, row-level access control, and environment variable handling.
  • Code Examples: Provides practical TypeScript snippets demonstrating secure patterns for each security aspect.
  • Use Case: A developer can run through this checklist before deploying their Convex application to ensure all critical security measures are in place, preventing potential exploits.

Quick Start

Run a security audit on your Convex application using the provided checklist and code examples.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure my Convex application before production?

Secure your Convex application by auditing authentication, function exposure, argument validation, row-level access control, and environment variables using a comprehensive checklist with code examples.

What is row-level access control in Convex?

Row-level access control in Convex involves validating authenticated user identities within functions to restrict database row access, preventing unauthorized data retrieval and modifications.

How do I validate arguments in Convex functions?

Validate arguments in Convex by defining strict schema types for function inputs. The security checklist provides TypeScript snippets demonstrating secure argument validation patterns to prevent unexpected data processing.

How do I manage environment variables securely in a Convex backend?

Manage environment variables securely in a Convex backend by storing sensitive configuration data in environment variables rather than client code. The security checklist outlines proper handling practices for production readiness.

What are the common security vulnerabilities in Convex applications?

Common Convex security vulnerabilities include improper authentication, overly exposed functions, missing argument validation, absent row-level access control, and mishandled environment variables. The audit checklist helps identify and mitigate these risks proactively.

Does this security checklist provide code examples for Convex?

Yes, the security checklist provides practical TypeScript code snippets demonstrating secure patterns for authentication, function exposure, argument validation, and row-level access control in Convex applications.