convex-auth
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure development practices. It correctly instructs users to use environment variables for sensitive secrets and signing keys rather than hardcoding them into scripts.
- [SAFE]: Webhook implementations are required to verify signatures using provider SDKs, which prevents unauthorized data injection from external sources.
- [SAFE]: The skill mandates row-level authorization for all public functions and suggests moving sensitive logic to internal functions, adhering to the principle of least privilege.
Audit Metadata