convex-security-audit
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation and pattern library for security auditing within the Convex platform. It provides instructional templates rather than executable malicious code.
- [SAFE]: Accesses to sensitive environment variables (e.g.,
EXTERNAL_API_KEY,STRIPE_SECRET_KEY) are demonstrated using standard best practices, explicitly advising against hardcoding credentials. - [SAFE]: Documentation links provided (e.g.,
docs.convex.dev) point to the official well-known service provider's website. - [SAFE]: The skill includes explicit warnings and best practices to prevent common pitfalls such as unauthorized deployment or trusting client-side data.
Audit Metadata