convex-security-check

Audit Convex applications for authentication, access control, and environment handling.

Updated Apr 7, 2026
One-click install
npx skills add https://github.com/Yahia89/ordering-food --skill convex-security-check-yahia89
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/Yahia89/ordering-food/tree/main/.claude/skills/convex-security-check
Command: npx skills add https://github.com/Yahia89/ordering-food --skill convex-security-check-yahia89

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Authenticated Convex apps often lack a quick, repeatable security audit path. This checklist provides a structured, lightweight review that covers authentication, function exposure, argument validation, row-level access control, and environment variable handling to help teams identify and fix common security gaps.

Core Features & Use Cases

  • A structured, actionable checklist for Convex security reviews, including authentication checks, exposure controls, input validation, access rules, and environment-variable hygiene.
  • Use cases include security reviews during development, pre-deployment checks, and ongoing compliance audits for Convex projects.

Quick Start

Run a security review of your Convex project by validating authentication, access controls, and environment handling against the checklist.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on a Convex application?

Run a Convex security audit by validating authentication, access controls, function exposure, argument validation, and environment variable handling against a structured checklist to identify and fix common security gaps.

What does row-level access control review involve for Convex databases?

Row-level access control review verifies that your Convex data access rules enforce proper authorization checks, ensuring users can only interact with database rows they are explicitly permitted to access.

Can I use a security checklist for Convex projects in staging and production?

Yes, you can apply this security checklist to Convex projects in development, staging, or production to verify secure patterns across APIs, data access, and deployments.

Why do I need argument validation in my Convex functions?

Argument validation enforces strict input checks in your Convex functions, preventing invalid or malicious data from entering your API logic and ensuring safe handling of internal versus public functions.

What is the best way to check environment variable handling in a Convex deployment?

The best way to check environment variable handling is verifying safe deployment practices that securely manage configurations without exposing sensitive secrets across your Convex application environments.