📦

convex-explain-app

Name: convex-explain-app
Author: get-convex

مراجعة المحتوى r1 آمن ⚙️ الأوامر الخارجية

Explain Your Convex Application Architecture

Understanding an unfamiliar Convex application requires connecting schemas, functions, authentication, and integrations. This skill produces a structured, source-grounded architecture map without modifying the application.

يدعم: Claude Codex Code(CC)

🥉 77 برونزي

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "convex-explain-app" from https://skillstore.io/skills/get-convex-convex-explain-app.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-explain-app/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/get-convex-convex-explain-app.md manifest موقَّع GET /api/skills/get-convex-convex-explain-app/manifest lockfile موقَّع GET /api/skills/get-convex-convex-explain-app/lockfile

اختبرها

جارٍ استخدام "convex-explain-app". Explain the data model and relationships in this task application.

النتيجة المتوقعة:

The application stores projects, tasks, and users. Tasks belong to projects through projectId and to users through ownerId.

جارٍ استخدام "convex-explain-app". Which functions are client-accessible, and what data do they touch?

النتيجة المتوقعة:

Public queries read projects and tasks for the authenticated user.
Public mutations create and update tasks after ownership checks.
Internal functions perform maintenance work and are not directly client-accessible.

جارٍ استخدام "convex-explain-app". Trace one representative request flow.

النتيجة المتوقعة:

The client calls createTask, identity is verified, ownership is checked, and the task is inserted before listMyTasks reads it by index.

التدقيق الأمني

آمن

v1 • ٢١‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

All four static alerts are false positives caused by Markdown backticks around file paths, APIs, and package names. No command execution or semantic security threat is present.

الملفات التي تم فحصها

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

عوامل الخطر

⚙️ الأوامر الخارجية (4)

SKILL.md:10 SKILL.md:14 SKILL.md:15 SKILL.md:18

لم يكتشف أحدث تدقيق ثابت ودلالي مكتمل أي نتائج أمنية مؤكدة. ولا يثبت ذلك أن المهارة خالية من الآثار الجانبية.

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/get-convex-convex-explain-app/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/get-convex-convex-explain-app/security.svg)](https://skillstore.io/skills/get-convex-convex-explain-app?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/get-convex-convex-explain-app?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-explain-app/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/get-convex-convex-explain-app.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

get-convex. (2026). convex-explain-app security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-explain-app/audits/1

اقتباس BibTeX

@techreport{get-convex-get-convex-convex-explain-app-2026,
  author = {get-convex},
  title = {convex-explain-app security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/get-convex-convex-explain-app/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "convex-explain-app security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "get-convex"
date-released: "2026-09-21"
url: "https://skillstore.io/skills/get-convex-convex-explain-app/audits/1"
identifiers:
  - type: other
    value: "skillstore:get-convex-convex-explain-app:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Onboard to a Convex codebase

Build a concise map of tables, functions, authentication, integrations, and request flows before making changes.

Prepare architecture documentation

Turn the current schema and function surface into source-grounded documentation for technical review.

Scope a deeper review

Identify public surfaces, ownership patterns, and external edges that deserve focused security or readiness analysis.

جرّب هذه الموجّهات

Explain the application

Explain this Convex application using its schema and exported functions. Summarize tables, relationships, public functions, internal functions, and authentication.

Map data and access

Map every Convex table, relationship, index, and function. Show which public and internal functions read or write each table.

Trace system flows

Explain authentication, ownership checks, components, HTTP routes, cron jobs, and external calls. Trace two representative requests from entry point to data.

Produce an architecture handoff

Create a source-grounded Convex architecture handoff. Highlight ambiguous behavior, public exposure, data relationships, ownership enforcement, external edges, and recommended next review steps.

أفضل الممارسات

Provide the complete Convex schema and function surface for the most accurate map.
Ask the skill to identify uncertainty whenever generated files or deployment details are unavailable.
Follow the architecture map with a dedicated authorization or launch-readiness review.

تجنب

Do not treat descriptive output as proof that authorization is secure.
Do not request inferred behavior when the source does not show it.
Do not use an outdated schema or partial function list as the sole source of truth.

الأسئلة المتكررة

Does this skill change my Convex application?

No. It reads available source and deployment metadata to produce documentation.

What source files does it use?

It relies on the Convex schema, exported function surface, authentication configuration, component configuration, HTTP routes, and cron definitions.

Can it inspect a deployed application?

Yes, when official read-only deployment tools are available. Otherwise, it analyzes the local source.

Does it audit authorization vulnerabilities?

No. It describes authentication and ownership patterns, then recommends a dedicated authorization review.

How does it handle missing information?

It marks unclear behavior as ambiguous instead of inventing an explanation.

What does the final output contain?

The output covers data relationships, function visibility, authentication, ownership, components, external edges, representative flows, and appropriate next review steps.

تفاصيل المطور

المؤلف

get-convex

الترخيص

MIT

مراجعة Skillstore

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/get-convex/agent-skills/tree/0aa10576821c6928f6a0f498c087af4ee231536e/skills/convex-explain-app

مرجع

ee1e1d0465cbfd49d2dffacf50000ec9a8812bf0

حداثة الصيانة

٢١‏/٩‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 SKILL.md