convex-migrate-rehearse
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npx convexCLI to manage deployments, data exports, and data imports. These commands are standard operations for the Convex platform and are executed in the context of a legitimate migration workflow. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to create a local snapshot of production data using
npx convex export. It correctly identifies these snapshots as sensitive real-world data and provides explicit instructions to treat them as such, including advice to delete them locally and not commit them to version control. - [CREDENTIALS_UNSAFE]: The skill references the
CONVEX_DEPLOY_KEYenvironment variable for authentication with preview deployments. It follows security best practices by assuming the credential is provided via the environment rather than prompting for it or hardcoding values. - [REMOTE_CODE_EXECUTION]: Recommends the use of the
@convex-dev/migrationslibrary for data backfills. As this is a vendor-owned package designed for the platform, its use is considered standard practice for the described workflow.
Audit Metadata