convex-security-check

Audit Convex applications for authentication, function exposure, and validation risks.

Updated Apr 24, 2026
One-click install
npx skills add https://github.com/Katlyng/proy_vibetribe --skill convex-security-check-katlyng
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/Katlyng/proy_vibetribe/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/Katlyng/proy_vibetribe --skill convex-security-check-katlyng

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured security audit for Convex applications, helping teams quickly identify authentication gaps, exposed functions, validation issues, and environment variable risks.

Core Features & Use Cases

  • Authentication checks verify user identity handling and session security.
  • Function exposure & access control review for public vs internal APIs and proper use of internal primitives.
  • Argument validation & data safety ensure proper validators and secure data handling.
  • Real-world scenario: auditing a Convex project to surface misconfigurations before deployment.

Quick Start

Initiate a quick security review of your Convex app by running the audit checklist against your deployment and codebase.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a Convex application?

To run a security audit on a Convex application, execute the structured checklist against your deployment and codebase to identify authentication gaps, exposed functions, and validation issues.

What does row-level access control review check in Convex?

Row-level access control review verifies correct authorization rules applied to database queries, ensuring users can only access permitted data rows within your Convex backend.

How do I verify public vs internal function exposure in Convex?

To verify function exposure in Convex, audit your API endpoints to ensure internal primitives are correctly hidden and only intended public functions are exposed to the frontend.

Does the Convex security checklist cover environment variable handling?

Yes, the Convex security checklist covers environment variable handling by enforcing safe storage and access practices to prevent sensitive data leaks across your project environments.

How do I validate arguments in Convex backend functions for security?

To validate arguments in Convex backend functions, apply strict argument validators to ensure proper data formatting and prevent injection attacks before processing queries or mutations.