skills.rest
justinlevinedotme
justinlevinedotmeCOMMUNITY
Explore all skills by this author →
GitHub

security-convex

Audit Convex applications for authentication, authorization, and input validation.

7|2|Updated Jan 18, 2026
Search Tags:#authorization#security#authentication#validation#audit#webhooks#convex
One-click install
npx skills add https://github.com/justinlevinedotme/jalco-opencode --skill security-convex
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-convex
Source: https://github.com/justinlevinedotme/jalco-opencode/tree/main/opencode/.config/opencode/skills/security-convex
Command: npx skills add https://github.com/justinlevinedotme/jalco-opencode --skill security-convex

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Convex security audit patterns to ensure authentication, authorization, and input validation are correctly enforced across queries, mutations, and HTTP actions.

Core Features & Use Cases

  • Provides enforcement patterns for authentication and authorization in Convex apps.
  • Highlights and prevents common issues like IDOR, missing validators, and improper env usage.
  • Useful for audits of Convex projects with convex directory present.

Quick Start

Run a quick audit on your Convex project to identify unauthenticated functions, missing validators, and insecure endpoints.

Frequently Asked Questions about security-convex

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex app for authentication and authorization issues?▼

Audit Convex apps by reviewing queries, mutations, and HTTP actions to enforce authentication and authorization. The process identifies missing ownership checks and access controls across the codebase.

What are common security vulnerabilities in Convex applications?▼

Common Convex security vulnerabilities include IDOR, missing input validators, unauthenticated public operations, and improper environment variable handling within custom functions and webhooks.

How do I prevent missing input validation in Convex queries and mutations?▼

Prevent missing input validation in Convex by enforcing strict validators on all queries and mutations. Audits detect unauthenticated functions and insecure endpoints lacking proper validation rules.

Can I review Convex HTTP actions and webhooks for secure environment variable usage?▼

Review Convex HTTP actions and webhooks to ensure secure environment variable usage. Audits check internal versus public operations and verify proper access controls are applied.

Does this security audit require a specific Convex project structure?▼

The security audit requires a Convex project with a convex directory present. It evaluates custom functions, subscriptions, and validators within that specific directory structure.

When should I run a security audit on my Convex codebase?▼

Run a Convex security audit when you need to verify access controls and ownership checks across queries and mutations. It highlights insecure endpoints and missing validators before deployment.

Related Skills

Explore More Software Engineering Skills→
get-convexget-convex
9

convex-return-validators

Guide developers on applying return validators in Convex functions for runtime contracts.

Official
Intermediate
openridesphopenridesph
1

convex-security-check

Audit Convex applications for authentication and access control weaknesses.

Official
Advanced
NitzanSelwynNitzanSelwyn

convex-security-check

Enforce security checks for Convex applications across authentication, validators, and access control.

Community
Intermediate
OneWave-AIOneWave-AI
245

code-review-pro

Review code for security vulnerabilities, performance bottlenecks, and maintainability issues.

Official
Basic