convex-security-audit

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation and pattern library for security auditing within the Convex platform. It provides instructional templates rather than executable malicious code.
  • [SAFE]: Accesses to sensitive environment variables (e.g., EXTERNAL_API_KEY, STRIPE_SECRET_KEY) are demonstrated using standard best practices, explicitly advising against hardcoding credentials.
  • [SAFE]: Documentation links provided (e.g., docs.convex.dev) point to the official well-known service provider's website.
  • [SAFE]: The skill includes explicit warnings and best practices to prevent common pitfalls such as unauthorized deployment or trusting client-side data.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:03 PM