convex-improve-convex-plugin

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is coherent with Convex's documented feedback workflow, but its actual mechanism is a high-risk remote `curl|bash` helper from an unspecified host that then uploads local transcripts off-device. The main concern is install/execution trust and unverifiable data handling, not confirmed malware.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:47 PM
Package URL
pkg:socket/skills-sh/get-convex%2Fagent-skills%2Fconvex-improve-convex-plugin%2F@55f8c5359ac949dadbd1936f32f1aee1107e7fb5ece9bafa8c19ac5d56312d47