vibe-coding-db-convex
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and template resource for integrating the Convex database. All code examples follow official patterns and standard TypeScript development practices.
- [SAFE]: External network operations described in the code (e.g., calls to OpenAI API and Stripe webhooks) target well-known, trusted services for legitimate functional purposes.
- [SAFE]: Package installations for 'convex' and '@convex-dev/agent' are official tools required for the database's operation. No suspicious or unversioned third-party dependencies are introduced.
- [SAFE]: The skill incorporates security best practices, such as demonstrating row-level access control, mandatory authentication checks using 'ctx.auth.getUserIdentity()', and strict data validation using Convex validators ('v.string()', 'v.id()', etc.).
- [SAFE]: Sensitive information is handled via environment variables (e.g., 'process.env.OPENAI_API_KEY'), which is the recommended safe practice for secret management.
Audit Metadata