design
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation focuses on providing legitimate developer guidance for the Convex backend platform.
- [COMMAND_EXECUTION]: The skill references standard development tools and CLI commands, such as 'npx convex dev', 'npx tsc', and 'npx shadcn', which are necessary for the described development workflow.
- [EXTERNAL_DOWNLOADS]: The skill recommends the use of official libraries and components provided by the vendor (e.g., '@convex-dev/agent', '@convex-dev/workflow', and other '@convex-dev/*' packages) which are legitimate resources for building on the platform.
- [CREDENTIALS_SAFE]: The skill correctly advises against hardcoding secrets, recommending the use of environment variables managed via the vendor's CLI ('npx convex env set').
Audit Metadata