convex-quickstart

Pass

Audited by Gen Agent Trust Hub on May 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to execute standard development commands such as npm install, npm run dev, and npx convex deploy for project setup and management.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npm create convex@latest to fetch scaffolding tools and templates, including support for downloading project templates from public GitHub repositories.
  • [REMOTE_CODE_EXECUTION]: Scaffolding via npm create involves executing remote code from a well-known service's official tooling.
  • [SAFE]: The instructions explicitly recommend that the agent does not run interactive or authentication-required processes like npx convex dev directly, advising instead that these be performed by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
May 2, 2026, 05:06 PM