convex-security-audit
Deep Convex security review patterns for authorization, data boundaries, sensitive operations, and defense in depth.
Files1
View on GitHubSKILL.md.agents/skills/convex-security-audit/SKILL.md
GitHubConvex Security Audit
Use this for a deeper security review than convex-security-check.
Focus areas
- role and permission boundaries,
- resource-level authorization,
- sensitive mutations and actions,
- abuse prevention and rate limiting,
- auditability of destructive or privileged operations.
Repo fit
- Pay extra attention to API key storage, vault-like flows, channels, and any path that bridges daemon and Convex state.