convex-verify

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes npx vitest run to perform the automated verification of Convex functions. This is a standard development operation within the context of the skill's purpose.\n- [DYNAMIC_EXECUTION]: The workflow requires the creation of vitest.config.ts and specific test files at runtime. These files are generated from templates to facilitate in-process testing with convex-test.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided code (Convex queries and mutations) to determine test logic. \n
  • Ingestion points: Exported Convex functions identified in step 1 of the workflow.\n
  • Boundary markers: The skill instructs the agent to use specific assertion patterns but does not define explicit delimiters for the ingested code.\n
  • Capability inventory: File writing (config/tests) and command execution (npx).\n
  • Sanitization: The agent follows structural patterns for testing rather than performing explicit input sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 03:15 PM
Security Audit — agent-trust-hub — convex-verify