convex-authz
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx tsc --noEmitto verify the integrity and type safety of authorization fixes applied to the project code.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes local source code from theconvex/directory (Ingestion points). The risk is mitigated by requiring objective regex-based matches to trigger actions (Boundary markers). The skill has the capability to modify project files and execute the TypeScript compiler (Capability inventory), and it usestscto verify the validity of generated code (Sanitization).- [SAFE]: The skill implements a 'Mandatory First Step' to verify the application's authentication foundation before applying authorization hardening, ensuring that enforcement is functional and correctly mapped to the user identity provider.
Audit Metadata