convex-security-check

Audit Convex apps for authentication, function exposure, and environment misconfigurations.

Updated Jan 27, 2026
One-click install
npx skills add https://github.com/zagarlucas/zagarlucas.github.io --skill convex-security-check-zagarlucas
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/zagarlucas/zagarlucas.github.io/tree/main/.continue/skills/convex-security-check
Command: npx skills add https://github.com/zagarlucas/zagarlucas.github.io --skill convex-security-check-zagarlucas

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex developers need a structured, repeatable security review to identify authentication gaps, exposed functions, and misconfigurations before deployment.

Core Features & Use Cases

  • Authentication checks
  • Function exposure reviews
  • Environment variable validations Use Case: When shipping a Convex backend, run this checklist to ensure queries and mutations enforce proper auth and ownership, and secrets are not leaked.

Quick Start

Run the Convex Security Check against your project to verify authentication, function exposure, and environment security.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex backend for security gaps before deployment?

To audit a Convex backend for security gaps, run a structured checklist that verifies authentication, function exposure, argument validation, and environment variable handling to ensure queries and mutations enforce proper auth.

What security checks are needed for Convex functions and authentication?

Security checks for Convex functions include reviewing function exposure, validating arguments, enforcing row-level access control, and verifying that authentication mechanisms prevent unauthorized queries and mutations.

How do I ensure my Convex queries and mutations enforce proper auth and ownership?

To ensure Convex queries and mutations enforce proper auth, apply a security checklist that validates row-level access control and confirms functions restrict data access to authorized users before deployment.

Can I use a security checklist to validate environment variables in Convex apps?

Yes, a Convex security checklist validates environment variable handling to ensure secrets are not leaked, confirming that sensitive configurations remain secure across the backend.

What is the best way to prevent exposed functions in a Convex application?

The best way to prevent exposed functions in a Convex application is performing a function exposure review using a code-agnostic checklist, ensuring mutations and queries require proper authentication.

Does a Convex security audit cover row-level access control and argument validation?

A Convex security audit covers row-level access control and argument validation, providing concrete guidance and code samples to verify that backend functions restrict data access appropriately.