setup-convex
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for setting up a standard authentication integration between Convex and Sigma Auth. All external resources, including the
sigma-auth-pluginand associated URLs (auth.sigmaidentity.com), are consistent with the vendor's own ecosystem (b-open-io). - [SAFE]: The package installations use standard, versioned packages from public registries (
@convex-dev/better-auth@0.10.10,better-auth@1.4.9). - [SAFE]: The guide includes security best practices for handling sensitive credentials, specifically instructing the user to store the
SIGMA_MEMBER_PRIVATE_KEYin server-side environment variables and never exposing it to the client. - [SAFE]: The use of command execution (
bun add,npx convex env set,npx @better-auth/cli generate) is appropriate for the stated purpose of setting up a development environment and configuring a backend deployment.
Audit Metadata