convex-improve-convex-plugin

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is coherent with Convex's documented feedback workflow, but its actual mechanism is a high-risk remote `curl|bash` helper from an unspecified host that then uploads local transcripts off-device. The main concern is install/execution trust and unverifiable data handling, not confirmed malware.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Sep 14, 2026, 06:14 PM
Package URL
pkg:socket/skills-sh/openclaw%2Fclawhub%2Fconvex-improve-convex-plugin%2F@d2eb6763b639564ac8fbfee6bf69c49f06341e1f9c177c3fd9aa16dc0ec60b4e