convex-security-check

Audit Convex applications for authentication, function exposure, and environment variable handling.

1|1|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/mauricioacp/tanstack-convex-better-auth-template --skill convex-security-check-mauricioacp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/mauricioacp/tanstack-convex-better-auth-template/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/mauricioacp/tanstack-convex-better-auth-template --skill convex-security-check-mauricioacp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This guide provides a structured checklist to quickly assess Convex applications for authentication setup, function exposure controls, input validation, row-level access, and environment variable handling, helping teams harden security without manual guesswork.

Core Features & Use Cases

  • Authentication posture assessment
  • Function exposure governance (public vs internal)
  • Validation and environment safety checks
  • Use Case: During code reviews or deployments to verify security readiness.

Quick Start

Execute the Convex Security Check against your app to generate a concise security audit covering authentication, function exposure, argument validation, row-level access, and environment variable handling.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex application for authentication and function exposure?

To audit a Convex application for authentication and function exposure, run a security check that assesses authentication posture, enforces explicit checks, and separates public from internal functions to ensure proper access control governance.

What does row-level access control validation look like in Convex?

Row-level access control validation in Convex involves enforcing strict argument validators and verifying user permissions within database queries to prevent unauthorized data access during security hardening.

How do I secure environment variables in a Convex app before deployment?

Secure environment variables in a Convex app by running an environment safety check that validates variable handling and ensures sensitive configuration data is strictly controlled during deployment preparation.

Can I use a security checklist to verify Convex security readiness during code reviews?

Yes, you can use a structured security checklist during code reviews to quickly assess Convex applications for input validation, function exposure, and authentication setup, generating a concise security audit without guesswork.

How do I separate public and internal functions in Convex for access control?

Separate public and internal functions in Convex by applying function exposure governance, ensuring internal functions have explicit authentication checks and strict argument validators to enforce secure access boundaries.