convex-authz
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx tsc --noEmitto verify that the hardening changes do not introduce type errors. This is a standard development tool and practice. - [INDIRECT_PROMPT_INJECTION]: The skill processes source code from the
convex/directory which could contain instructions intended to mislead the agent. However, the skill employs deterministic regex-based scanning and follows a predefined 'requireIdentity/requireOwner' pattern, which limits the effectiveness of such injections. Ingestion points:convex/**/*.ts. Capabilities: File modifications and command execution (npx tsc). Sanitization: None explicitly defined for input, but logic is strictly template-based.
Audit Metadata