convex-deploy-guard
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages deployment targets by reading local project files (
.env.local,convex.json) and environment variables (CONVEX_DEPLOYMENT,CONVEX_DEPLOY_KEY). These operations are used purely for environment identification and do not involve exfiltration. - [SAFE]: Usage of
npx convexcommands and the official Convex MCP tool are legitimate vendor-specific operations for the author, 'get-convex'. - [SAFE]: The instructions prioritize user safety by requiring explicit per-session confirmation for production environments and strictly honoring 'read-only' requests by disabling mutating tools.
Audit Metadata