convex-optimize

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external audit tools like launch-readiness to influence its optimization plan. This represents a potential injection surface if the tool's output were compromised, though the risk is mitigated by the requirement for explicit user confirmation before any action is taken.
  • [COMMAND_EXECUTION]: The skill's workflow includes executing development tools such as launch-readiness and check-updates, and installing observability packages like sentinel. These operations are consistent with the skill's stated purpose of application optimization.
  • [EXTERNAL_DOWNLOADS]: The skill manages updates for @convex-dev/* components, which are official dependencies for the Convex platform and represent standard development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:14 PM