convex-auth
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands for project setup, including package installation (@convex-dev/auth, jose), CLI tool usage (npx convex env set), and UI component addition (npx shadcn@latest add). These are standard development operations.
- [DYNAMIC_EXECUTION]: A Node.js one-liner is used to execute a script that generates an RS256 key pair locally. The script is provided in plain text within the skill instructions and uses the well-known jose library to perform necessary setup steps for Convex authentication without requiring an interactive session.
Audit Metadata