convex-expert
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run shell commands using
npx, specificallynpx tsc --noEmitandnpx convex dev --once. These are standard development workflows for the Convex platform intended to verify code compilation and deployment readiness. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest local project data to inform its behavior, which presents a surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Reads project-specific files including
convex/schema.tsandconvex/_generated/ai/guidelines.md. - Capability inventory: The agent can execute shell commands via
npxand read/write files within theconvex/directory. - Boundary markers: No specific delimiters are used to separate ingested file content from the system instructions.
- Sanitization: The skill does not implement specific sanitization or validation of the ingested file content.
- [EXTERNAL_DOWNLOADS]: The skill references and encourages the use of official vendor packages for implementing specific functionalities.
- Evidence: Directs the agent to use
@convex-dev/agentand@convex-dev/workflowfor chat features and multi-step flows.
Audit Metadata