setup-convex

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for setting up a standard authentication integration between Convex and Sigma Auth. All external resources, including the sigma-auth-plugin and associated URLs (auth.sigmaidentity.com), are consistent with the vendor's own ecosystem (b-open-io).
  • [SAFE]: The package installations use standard, versioned packages from public registries (@convex-dev/better-auth@0.10.10, better-auth@1.4.9).
  • [SAFE]: The guide includes security best practices for handling sensitive credentials, specifically instructing the user to store the SIGMA_MEMBER_PRIVATE_KEY in server-side environment variables and never exposing it to the client.
  • [SAFE]: The use of command execution (bun add, npx convex env set, npx @better-auth/cli generate) is appropriate for the stated purpose of setting up a development environment and configuring a backend deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 05:13 PM