convex-optimize
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external audit tools like
launch-readinessto influence its optimization plan. This represents a potential injection surface if the tool's output were compromised, though the risk is mitigated by the requirement for explicit user confirmation before any action is taken. - [COMMAND_EXECUTION]: The skill's workflow includes executing development tools such as
launch-readinessandcheck-updates, and installing observability packages likesentinel. These operations are consistent with the skill's stated purpose of application optimization. - [EXTERNAL_DOWNLOADS]: The skill manages updates for
@convex-dev/*components, which are official dependencies for the Convex platform and represent standard development practices.
Audit Metadata