convex-migrate-rehearse

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx convex CLI to manage deployments, data exports, and data imports. These commands are standard operations for the Convex platform and are executed in the context of a legitimate migration workflow.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to create a local snapshot of production data using npx convex export. It correctly identifies these snapshots as sensitive real-world data and provides explicit instructions to treat them as such, including advice to delete them locally and not commit them to version control.
  • [CREDENTIALS_UNSAFE]: The skill references the CONVEX_DEPLOY_KEY environment variable for authentication with preview deployments. It follows security best practices by assuming the credential is provided via the environment rather than prompting for it or hardcoding values.
  • [REMOTE_CODE_EXECUTION]: Recommends the use of the @convex-dev/migrations library for data backfills. As this is a vendor-owned package designed for the platform, its use is considered standard practice for the described workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 05:25 PM
Security Audit — agent-trust-hub — convex-migrate-rehearse