Fähigkeiten convex-expert
📦

convex-expert

Inhaltsrevision r1 Hohes Risiko ⚙️ Externe Befehle

Build Reliable Convex Backends

Convex backend code can fail from invalid schemas, imports, validators, or query patterns. This skill applies Convex-specific rules and verification steps.

UnterstĂĽtzt: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Schlecht

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage
Review the Skillstore skill "convex-expert" from https://skillstore.io/skills/get-convex-convex-expert.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-expert/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/get-convex-convex-expert.md Signiertes manifest GET /api/skills/get-convex-convex-expert/manifest Signiertes lockfile GET /api/skills/get-convex-convex-expert/lockfile

Testen

„convex-expert“ wird verwendet. Review a message-list query that filters the whole table and returns every matching row.

Erwartetes Ergebnis:

  • Add a schema index for the conversation identifier.
  • Replace the full-table filter with an indexed query.
  • Paginate results and validate both arguments and returns.

„convex-expert“ wird verwendet. Plan adding a required status field to an existing populated table.

Erwartetes Ergebnis:

Add the field as optional, deploy compatibility changes, backfill existing records, verify completion, then make the validator required.

„convex-expert“ wird verwendet. Review a public mutation used only by a scheduled backend task.

Erwartetes Ergebnis:

Convert the mutation to an internal function and update the scheduled task reference. Keep public access only when a client requires it.

Sicherheitsaudit

Hohes Risiko
v1 • 7.9.2026 Versionsbericht öffnen

Most detections are Markdown backticks around API names, not shell execution. The verification rule does execute project tools and can deploy code or rewrite local Convex configuration without explicit approval.

1
Gescannte Dateien
39
Analysierte Zeilen
1
PrĂĽfelemente
0
Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (3)

Hoch
SKILL.md:38
Environment file access
- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc
The text acknowledges that the anonymous Convex command can rebind .env.local. This is a concrete local environment configuration change.
Hoch
SKILL.md:38
Environment variant files
- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc
The workflow conditionally enables anonymous mode and states that this operation can rewrite .env.local. That creates a direct environment-file integrity risk.
Hoch
SKILL.md:38
Deployment Without Explicit Approval
The skill requires pushing changes and permits anonymous deployment creation. This can upload project code and alter cloud state without explicit user confirmation.
Line 38 directly requires a successful push and provides commands for authenticated or anonymous deployment. No confirmation step is specified.
Elemente der Fähigkeitsprüfung (1)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel
SKILL.md:38
Ruby/shell backtick execution
- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc
The line explicitly directs the agent to run npx commands and push backend changes to a deployment. These commands can execute project tooling and change local or remote state.

Risikofaktoren

⚙️ Externe Befehle (8)
SKILL.md:3 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:37 SKILL.md:38
GeprĂĽft von: codex
Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen
Sicherheitsbewertung

Berichtslink kopieren

https://skillstore.io/skills/get-convex-convex-expert/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/get-convex-convex-expert/security.svg)](https://skillstore.io/skills/get-convex-convex-expert?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/get-convex-convex-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/get-convex-convex-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

get-convex. (2026). convex-expert security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-expert/audits/1

BibTeX-Zitat

@techreport{get-convex-get-convex-convex-expert-2026, author = {get-convex}, title = {convex-expert security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/get-convex-convex-expert/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "convex-expert security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "get-convex" date-released: "2026-09-07" url: "https://skillstore.io/skills/get-convex-convex-expert/audits/1" identifiers: - type: other value: "skillstore:get-convex-convex-expert:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel
55
Architektur
85
Wartbarkeit
87
Inhalt
65
Gemeinschaft
83
Spezifikationskonformität

Was Sie erstellen können

Create a Convex Feature

Design validated functions, indexes, and schema changes for a new application workflow.

Review Backend Reliability

Find unbounded reads, invalid imports, missing validators, and unsafe schema migrations.

Resolve Deployment Errors

Interpret validation, schema, import, and runtime errors from Convex development checks.

Diese Prompts ausprobieren

Explain a Convex Function 
Explain this Convex function and identify its arguments, return value, database access, and visibility: [function].
Design a Data Model 
Design a Convex schema and indexes for [feature]. Include validators, relationships, query paths, and migration notes.
Review a Convex Directory 
Review [files] for validators, imports, indexes, bounded reads, internal visibility, runtime separation, and safe schema evolution.
Plan a Production Migration 
Plan a staged Convex migration for [change]. Address compatibility, backfill, indexes, rollback, tests, and deployment approval.

Bewährte Praktiken

  • Provide the schema, related functions, expected behavior, and current errors.
  • Review generated Convex guidance before changing backend files.
  • Require approval before commands that deploy code or modify environment files.

Vermeiden

  • Do not request production deployment without identifying the target and approval boundary.
  • Do not omit project-specific authorization and data access requirements.
  • Do not treat generated recommendations as a substitute for tests and migration validation.

Häufig gestellte Fragen

What Convex code can this skill review?
It covers schemas, indexes, queries, mutations, actions, HTTP endpoints, scheduled jobs, storage, authentication wiring, and components.
Does it write Convex functions?
Yes. It can create object-form functions with argument and return validators using the project context.
Can it improve query performance?
It identifies full-table scans, recommends indexes, and uses pagination or bounded reads where appropriate.
Will it deploy changes automatically?
The source workflow requests deployment verification. Users should require explicit approval before any local or cloud state change.
Does it support schema migrations?
It recommends staged changes, optional fields, backfills, and later validator tightening for populated tables.
What context produces the best results?
Provide the current schema, related functions, generated guidance, requirements, errors, and deployment constraints.

Entwicklerdetails

Lizenz

MIT

Skillstore-Revision

r1

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/get-convex/agent-skills/tree/c41ece22681a50d326e54f30d24148a6d46d0c3c/skills/convex-expert

Ref.

d9e5ab86dafd32a1ddde9b8b4fde177589b55b95

Aktualität der Wartung

9.9.2026

Nutzung

1 Downloads · 0 Aufrufe

Dateistruktur

đź“„ SKILL.md