convex-security-check

Audit Convex app security across authentication, function exposure, and access control.

33|2|Updated Feb 21, 2025

Search Tags:#authorization #security #authentication #validation #environment-variables #convex #access-control

Ready to run

npx skills add https://github.com/yspreen/dotfiles --skill convex-security-check-yspreen

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/yspreen/dotfiles/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/yspreen/dotfiles --skill convex-security-check-yspreen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Quickly identify and remediate security gaps in Convex applications, ensuring robust authentication, controlled function exposure, strict input validation, proper row-level access control, and safe handling of environment variables.

Core Features & Use Cases

Comprehensive security checklist for Convex apps covering authentication, function exposure, argument validation, row-level access control, and environment variable handling.
Guidance on distinguishing public vs internal functions and ensuring sensitive operations use internal patterns.
Use Case: Before production deployment, run the checklist to verify only intended public functions are exposed and all data access is properly guarded.

Quick Start

Use the Convex security checklist to perform a quick audit of your project.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit a Convex app for security vulnerabilities before production?▼

To audit a Convex app for security vulnerabilities, use a comprehensive checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling to identify and remediate gaps before deployment.

How do I implement row-level access control and ownership checks in Convex?▼

Implement row-level access control in Convex by enforcing explicit ownership checks within your query and mutation functions, ensuring all data access is properly guarded and restricted to authorized users based on their identity.

What is the best way to secure sensitive operations and environment variables in Convex?▼

The best way to secure sensitive operations in Convex is to use internal function patterns for sensitive logic and apply safe handling practices for environment variables, ensuring secrets are never exposed through public endpoints.

How do I distinguish public vs internal functions to prevent unauthorized access in Convex?▼

To distinguish public vs internal functions in Convex, review your function exposure to ensure only intended operations are public, while routing sensitive operations to internal patterns to prevent unauthorized access.

Do I need explicit argument validators for all Convex mutations and queries?▼

Yes, you need explicit argument validators for Convex mutations and queries to enforce strict input validation, which prevents malformed or malicious data from reaching your database and business logic.

Why does my Convex security posture require strict input validation and access control?▼

Your Convex security posture requires strict input validation and access control to prevent unauthorized data manipulation, ensuring robust authentication and that only properly guarded data access is permitted.