convex-improve-convex-plugin
Review Convex Coding Sessions
Convex onboarding problems can remain hidden inside coding-session transcripts. This skill submits an approved transcript for analysis and summarizes actionable system improvements.
N’installez pas automatiquement ce Skill.
La politique de référence exige un examen par un opérateur avant toute action d’installation.
Installer avec mon Agent
Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.
Review the Skillstore skill "convex-improve-convex-plugin" from https://skillstore.io/skills/get-convex-convex-improve-convex-plugin.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-improve-convex-plugin/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.
Ressources lisibles par les agents
Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.
Tester
Utilisation de « convex-improve-convex-plugin ». Review my approved session for quickstart problems.
RĂ©sultat attendu:
- High: The bootstrap instructions did not explain the required environment value.
- Target: Bootstrap script documentation.
- Suggested fix: Validate the value early and show a direct recovery step.
- Win: The deployment verification step completed without intervention.
Utilisation de « convex-improve-convex-plugin ». Summarize findings for the maintainers.
RĂ©sultat attendu:
The review identified one severe runbook ambiguity and two tooling failures. It recommends clearer prerequisites, earlier validation, and preserving the successful verification flow.
Audit de sécurité
CritiqueThe skill downloads a remote helper and immediately executes it with Bash, so the critical pipe-to-shell finding is confirmed. It also uploads coding-session transcripts after consent, creating a separate high-severity privacy and data-disclosure risk.
Préoccupations de sécurité confirmées (2)
Éléments d’évaluation des capacités (1)
Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.
Facteurs de risque
⚙️ Commandes externes (1)
Motifs détectés
Partager et citer ce rapport
Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.
Copier le lien du rapport
https://skillstore.io/skills/get-convex-convex-improve-convex-plugin/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportBadge Markdown
[](https://skillstore.io/skills/get-convex-convex-improve-convex-plugin?utm_source=security_passport_badge)Badge HTML
<a href="https://skillstore.io/skills/get-convex-convex-improve-convex-plugin?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-improve-convex-plugin/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Carte intégrable
<iframe src="https://skillstore.io/embed/skills/get-convex-convex-improve-convex-plugin.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citations académiques (APA · BibTeX · CFF)
Citation APA
get-convex. (2026). convex-improve-convex-plugin security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-improve-convex-plugin/audits/1Citation BibTeX
@techreport{get-convex-get-convex-convex-improve-convex-plugin-2026,
author = {get-convex},
title = {convex-improve-convex-plugin security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/get-convex-convex-improve-convex-plugin/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "convex-improve-convex-plugin security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "get-convex"
date-released: "2026-09-21"
url: "https://skillstore.io/skills/get-convex-convex-improve-convex-plugin/audits/1"
identifiers:
- type: other
value: "skillstore:get-convex-convex-improve-convex-plugin:audit:1"
description: "Skillstore immutable audit report identifier"
Score Skillstore
Pourquoi ce score Niveau de confiance des preuves: FaibleCe que vous pouvez créer
Diagnose onboarding friction
Review a completed Convex setup session and identify unclear instructions, stalled steps, and tooling failures.
Improve agent instructions
Extract recurring agent difficulties and suggested fixes for skills, runbooks, and bootstrap scripts.
Prioritize developer experience work
Summarize severe workflow problems and successful patterns from an approved session review.
Essayez ces prompts
Review this Convex coding session. Ask for my sharing choice before submitting any transcript.
Review this session for ambiguous setup instructions, stalled agent behavior, and tooling failures. Summarize the most severe findings and suggested fixes.
Submit this approved session with the application idea: [IDEA]. Group findings by runbook, bootstrap script, skill, or component.
Review this approved Convex session. Rank findings by severity, name each affected target, propose concrete fixes, and conclude with successful patterns worth preserving.
Bonnes pratiques
- Review the sharing destination and transcript scope before granting consent.
- Use a concise application idea that accurately describes the reviewed session.
- Present findings by severity, affected target, suggested fix, and successful pattern.
Éviter
- Do not submit a transcript before the user explicitly chooses a consent option.
- Do not assume secret redaction removes proprietary code, personal data, or sensitive context.
- Do not present system-improvement findings as end-user product feedback.
Foire aux questions
What does this skill review?
Does it upload my transcript?
Will it ask before sharing?
Are secrets removed?
What happens when no transcript is found?
What results does the skill provide?
Détails du développeur
Auteur
get-convexLicence
MIT
RĂ©vision Skillstore
r1
Avis de version
L’auteur n’a déclaré aucune version.
RĂ©f
ee1e1d0465cbfd49d2dffacf50000ec9a8812bf0
RĂ©cence de maintenance
21/09/2026
Utilisation
0 téléchargements · 0 vues
Structure de fichiers
đź“„ SKILL.md