build-convex-clerk-swiftui
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides extensive documentation on secure secret management, explicitly instructing developers to use the Convex dashboard for environment variables rather than local configuration files to prevent credential exposure.
- [SAFE]: External dependencies and tools such as
convex,clerk-ios,clerk-convex-swift, andconvex-helpersare official packages from well-known service providers and are used according to standard development practices. - [SAFE]: The skill includes dedicated sections on preventing common security pitfalls, such as the "Trusting the Client for Authorization" pattern, which reinforces the importance of server-side verification of user identity using
tokenIdentifier. - [SAFE]: Code examples for authentication and data access follow industry best practices, utilizing official bridge packages and pre-built UI components (
AuthView,UserButton) provided by the vendors. - [SAFE]: The skill correctly identifies and warns against development-only features like
initConvexLogging(), ensuring they are guarded by build configurations to prevent data leakage in production.
Audit Metadata