skills.rest
not-ani
not-aniCOMMUNITY
Explore all skills by this author →
GitHub

convex-security-check

Audit Convex applications for authentication, function exposure, and access control.

Updated Feb 8, 2026
Search Tags:#authorization#security#authentication#validation#audit#environment-variables#convex
One-click install
npx skills add https://github.com/not-ani/elevated-school-takehome --skill convex-security-check-not-ani
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/not-ani/elevated-school-takehome/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/not-ani/elevated-school-takehome --skill convex-security-check-not-ani

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Performs a focused security audit of Convex applications, verifying authentication, function exposure, argument validation, row-level access control, and environment variable handling.

Core Features & Use Cases

  • Authentication checks and identity validation across queries and mutations.
  • Function exposure reviews to ensure only intended endpoints are public.
  • Argument validation and row-level access controls to enforce data security.
  • Use this to pre-deploy audit, security hardening, or compliance verification in Convex projects.

Quick Start

Run this security checklist against your Convex project to surface misconfigurations and remediation steps.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my Convex application?▼

To perform a Convex security audit, run a focused checklist that verifies authentication, function exposure, argument validation, row-level access control, and environment variable handling to surface misconfigurations and remediation steps.

What does row-level access control verification check in Convex backends?▼

Row-level access control verification in Convex checks that queries and mutations enforce data security boundaries, ensuring users can only access authorized database rows.

How do I ensure only intended Convex functions are public?▼

To ensure only intended Convex functions are public, perform a function exposure review that distinguishes between internal and public endpoints, enforcing strict access controls on your backend services.

Can I check environment variable handling and argument validation in Convex before deployment?▼

Yes, you can check environment variable handling and enforce explicit validators for arguments and returns in Convex as a pre-deploy audit to ensure safe configuration and security hardening.

When do I need to verify authentication across Convex queries and mutations?▼

You need to verify authentication across Convex queries and mutations during migrations, deployments, or security hardening efforts to ensure strict access controls and identity validation are present.

Related Skills

Explore More Software Engineering Skills→
KatlyngKatlyng

convex-security-check

Audit Convex applications for authentication, function exposure, and validation risks.

Community
Advanced
openridesphopenridesph
1

convex-security-check

Audit Convex applications for authentication and access control weaknesses.

Official
Advanced
IgorWarzochaIgorWarzocha

convex-auth

Enforce authentication and authorization in Convex server functions with OpenID Connect providers.

Community
Intermediate
EricJamesCrowEricJamesCrow

convex-security-check

Audit Convex apps for security gaps across authentication, exposure, validation, and access control.

Community
Advanced