build-convex-clerk-swiftui

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides extensive documentation on secure secret management, explicitly instructing developers to use the Convex dashboard for environment variables rather than local configuration files to prevent credential exposure.
  • [SAFE]: External dependencies and tools such as convex, clerk-ios, clerk-convex-swift, and convex-helpers are official packages from well-known service providers and are used according to standard development practices.
  • [SAFE]: The skill includes dedicated sections on preventing common security pitfalls, such as the "Trusting the Client for Authorization" pattern, which reinforces the importance of server-side verification of user identity using tokenIdentifier.
  • [SAFE]: Code examples for authentication and data access follow industry best practices, utilizing official bridge packages and pre-built UI components (AuthView, UserButton) provided by the vendors.
  • [SAFE]: The skill correctly identifies and warns against development-only features like initConvexLogging(), ensuring they are guarded by build configurations to prevent data leakage in production.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 11:10 PM