convex-improve-convex-plugin
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose is coherent with Convex's documented feedback workflow, but its actual mechanism is a high-risk remote `curl|bash` helper from an unspecified host that then uploads local transcripts off-device. The main concern is install/execution trust and unverifiable data handling, not confirmed malware.
Confidence: 84%Severity: 78%
Audit Metadata