convex-security-check

To audit a Convex application for security vulnerabilities, run the convex-security-check skill. It automatically checks authentication, function exposure, argument validation, row-level access control, and environment variable handling.

Security checks for Convex functions should review public and internal function exposure, verify proper argument validation, and evaluate row-level access control mechanisms to prevent unauthorized data access.

Yes, you need the Convex framework and its associated documentation installed. The security audit specifically targets Convex applications and requires the framework to evaluate function exposure and access controls.

Environment variable handling affects Convex application security by exposing sensitive configuration if not properly secured. The security audit inspects environment variable handling to identify potential vulnerabilities and ensure best practices.

Yes, you can automatically assess row-level access control in a Convex app by running the security audit skill. It evaluates your access control mechanisms to identify potential authorization vulnerabilities.

The best way to review authentication practices in a Convex application is using an automated security audit checklist. It assesses authentication and authorization implementations against established best practices.