convex-auth
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes a
node -ecommand to execute a JavaScript snippet for generating RS256 cryptographic keys (JWT_PRIVATE_KEY and JWKS). This execution is limited to a fixed, local script designed to facilitate headless authentication setup and does not incorporate untrusted external input.- [COMMAND_EXECUTION]: The skill performs standard software development operations usingpnpmandnpx, including installing the@convex-dev/authandjosepackages, adding UI components viashadcn, and managing environment variables through theconvexCLI. These operations are aligned with the skill's primary purpose of application configuration.
Audit Metadata