Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when th
no risky patterns detected
Type: Agent skill (SKILL.md) · Category: Security · Source: https://github.com/convex/templates/tree/HEAD/template-astro/.agents/skills/conv
| Capabilities (fewer powerful permissions = higher) | 50/50 |
| Maintenance | 32/35 |
| Documentation | 15/15 |
Always review files before installing. How scores work. Request a correction