convex-security-check

Audit Convex applications for authentication, function exposure, and access control risks.

Updated Feb 7, 2026
One-click install
npx skills add https://github.com/rieckt/create-loumi-app --skill convex-security-check-rieckt
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/rieckt/create-loumi-app/tree/main/template/skills/convex/convex-security-check
Command: npx skills add https://github.com/rieckt/create-loumi-app --skill convex-security-check-rieckt

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex Security Check provides a concise, structured audit that helps teams quickly identify authentication gaps, exposed functions, missing validators, and improper environment handling.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling.
  • Guides developers to identify misconfigurations and enforce best practices across Convex endpoints.
  • Use Case: during development, run the check to ensure new functions are properly secured and access rules are enforced.

Quick Start

Run the Convex Security Check in your project to start the security audit workflow.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure Convex functions against unauthorized access?

To secure Convex functions, enforce explicit argument validators and apply row-level access control rules to prevent unauthorized data exposure and ensure endpoints reject invalid inputs.

What does a Convex security checklist cover?

A Convex security checklist covers authentication gaps, exposed functions, missing validators, improper environment handling, and row-level access control to enforce secure patterns across project endpoints.

When should I run a security check on my Convex endpoints?

Run a security audit during development to identify exposed Convex endpoints and verify that new functions have proper access controls, explicit validators, and secure patterns enforced.

Why does my Convex app need explicit argument validators?

Your Convex app needs explicit argument validators to prevent unexpected inputs, mitigate exposure risks, and enforce secure patterns by ensuring functions process only properly formatted and authorized data.