convex-security-check

Audit Convex applications for authentication, function exposure, and environment variable handling.

1|1|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/mauricioacp/tanstack-convex-better-auth-template --skill convex-security-check-mauricioacp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: convex-security-check
Source: https://github.com/mauricioacp/tanstack-convex-better-auth-template/tree/main/.agents/skills/convex-security-check
Command: npx skills add https://github.com/mauricioacp/tanstack-convex-better-auth-template --skill convex-security-check-mauricioacp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This guide provides a structured checklist to quickly assess Convex applications for authentication setup, function exposure controls, input validation, row-level access, and environment variable handling, helping teams harden security without manual guesswork.

Core Features & Use Cases

  • Authentication posture assessment
  • Function exposure governance (public vs internal)
  • Validation and environment safety checks
  • Use Case: During code reviews or deployments to verify security readiness.

Quick Start

Execute the Convex Security Check against your app to generate a concise security audit covering authentication, function exposure, argument validation, row-level access, and environment variable handling.

Frequently Asked Questions about convex-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Convex application for authentication and function exposure?▼

To audit a Convex application for authentication and function exposure, run a security check that assesses authentication posture, enforces explicit checks, and separates public from internal functions to ensure proper access control governance.

What does row-level access control validation look like in Convex?▼

Row-level access control validation in Convex involves enforcing strict argument validators and verifying user permissions within database queries to prevent unauthorized data access during security hardening.

How do I secure environment variables in a Convex app before deployment?▼

Secure environment variables in a Convex app by running an environment safety check that validates variable handling and ensures sensitive configuration data is strictly controlled during deployment preparation.

Can I use a security checklist to verify Convex security readiness during code reviews?▼

Yes, you can use a structured security checklist during code reviews to quickly assess Convex applications for input validation, function exposure, and authentication setup, generating a concise security audit without guesswork.

How do I separate public and internal functions in Convex for access control?▼

Separate public and internal functions in Convex by applying function exposure governance, ensuring internal functions have explicit authentication checks and strict argument validators to enforce secure access boundaries.