convexcheck

Audit deployment configurations for security vulnerabilities and environment variable leaks.

Updated Jul 5, 2026
One-click install
npx skills add https://github.com/danwan/coding-agent --skill convexcheck
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: convexcheck
Source: https://github.com/danwan/coding-agent/tree/main/sources/skills/convexcheck
Command: npx skills add https://github.com/danwan/coding-agent --skill convexcheck

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill prevents critical deployment errors and security leaks by auditing project configurations against established safety rules, ensuring that environment variables and deployment scripts are correctly isolated and scoped.

Core Features & Use Cases

  • Deployment Safety Audit: Automatically verifies secret isolation, script hygiene, and target-prefix checks across Convex, Vercel, and Modal setups.
  • Risk Assessment: Provides a ranked summary of findings ranging from critical security risks to minor hygiene improvements.
  • Use Case: Run this audit before a production release to ensure that your deployment scripts are not accidentally targeting the wrong project instance or leaking sensitive keys.

Quick Start

Invoke the convexcheck skill to perform a full audit of the current project deployment configuration.

Frequently Asked Questions about convexcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit deployment configurations for security vulnerabilities before a production release?

To audit deployment configurations for security vulnerabilities, you can run a configuration audit that analyzes shell scripts, CI configurations, and cloud provider settings to validate secret isolation and target-prefix consistency without applying automated changes.

What is a cross-project environment variable leak in CI configurations?

A cross-project environment variable leak occurs when sensitive keys or deployment scripts are not correctly isolated and scoped across projects, which an audit can detect by verifying strict adherence to deployment safety protocols.

Does this deployment safety audit work with Convex, Vercel, and Modal setups?

Yes, the deployment safety audit automatically verifies secret isolation, script hygiene, and target-prefix checks specifically across Convex, Vercel, and Modal setups to prevent accidental misconfiguration.

How do I check for secret isolation and target-prefix consistency in shell scripts?

You can check for secret isolation and target-prefix consistency by running an audit that analyzes shell scripts and cloud provider settings, providing a ranked summary of findings from critical security risks to minor hygiene improvements.

Will this configuration audit automatically fix deployment script errors it finds?

No, this configuration audit will not automatically fix deployment script errors; it validates secret isolation and target-prefix consistency without applying automated changes, ensuring you maintain manual control over configuration updates.

Why do my deployment scripts keep targeting the wrong project instance?

Deployment scripts targeting the wrong project instance usually fail target-prefix checks, which an audit can identify by analyzing your CI configurations and cloud provider settings against established safety rules.