convex-http-actions
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code snippets for building secure HTTP endpoints on the Convex platform.
- [SAFE]: Includes explicit instructions and patterns for validating webhook signatures from Stripe, GitHub, and Clerk to prevent unauthorized access.
- [SAFE]: Demonstrates secure authentication patterns and correctly manages sensitive secrets using environment variables.
- [SAFE]: All external references point to official documentation at docs.convex.dev, which are recognized as trusted sources.
- [SAFE]: Analyzed the attack surface for indirect prompt injection and confirmed the skill promotes robust mitigation strategies through signature verification and input validation.
Audit Metadata