skills/openclaw/clawhub/convex-backup/Gen Agent Trust Hub

convex-backup

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands using npx convex to manage database exports, deployment creation, and data imports.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the database to perform integrity checks, which constitutes an attack surface where untrusted data could influence agent behavior.
  • Ingestion points: Database row counts and record samples are retrieved via the tables and runOneoffQuery tools during the assertion step in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the sampled data.
  • Capability inventory: The skill has the capability to execute CLI commands (npx convex) and perform network operations through the Convex service.
  • Sanitization: There is no mention of sanitizing or escaping the content of the database records before they are processed by the agent for verification.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the convex package. This is a well-known service for users of the Convex platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:14 PM