convex-security-check

Audit Convex applications for authentication, function exposure, and environment-variable handling.

Updated Aug 23, 2026

Search Tags:#authorization #security #authentication #validation #convex #access-control

Ready to run

npx skills add https://github.com/JuanQuenga/piggies-ts --skill convex-security-check-juanquenga

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/JuanQuenga/piggies-ts/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/JuanQuenga/piggies-ts --skill convex-security-check-juanquenga

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex Security Check provides a concise, structured audit to identify security gaps in Convex apps, covering authentication, function exposure, input validation, row-level access control, and environment variable handling.

Core Features & Use Cases

Authentication checks: validate that users are properly authenticated before accessing sensitive data.
Function exposure controls: ensure public vs internal functions are properly segregated.
Argument validation: enforce strict validators for inputs and outputs.
Row-level access: verify ownership and permissions on data operations.
Environment security: confirm secrets are not hardcoded and environment variables are used safely.

Quick Start

Run the Convex Security Check against your project to audit authentication, access control, and environment variable handling.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit authentication and access control in my Convex application?▼

To audit authentication in a Convex application, validate that users are properly authenticated before accessing sensitive data and verify row-level permissions on data operations. This ensures strict access control over queries and mutations.

What is the best way to secure environment variables in Convex backends?▼

Securing environment variables in Convex backends requires confirming secrets are not hardcoded and verifying safe handling of environment config during deployment. This prevents accidental exposure of sensitive application credentials.

How do I separate public vs internal functions in Convex to prevent unauthorized execution?▼

Separating public vs internal functions in Convex requires enforcing proper segregation controls across queries, mutations, and actions. This prevents unauthorized execution of sensitive backend operations by public clients.

Do I need explicit argument validators for Convex queries and mutations?▼

Yes, you need explicit argument validators for Convex queries and mutations to enforce strict input and output validation. This prevents invalid data from entering your backend and ensures consistent function execution.

What does a Convex security check cover for row-level access control?▼

A Convex security check for row-level access control verifies ownership and permissions on data operations. This confirms that users can only read or modify database rows they are explicitly authorized to access.