📦

convex-expert

Name: convex-expert
Author: get-convex

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды

Build Reliable Convex Backends

Convex backend code can fail from invalid schemas, imports, validators, or query patterns. This skill applies Convex-specific rules and verification steps.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "convex-expert" from https://skillstore.io/skills/get-convex-convex-expert.md and its manifest at https://skillstore.io/api/skills/get-convex-convex-expert/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/get-convex-convex-expert.md Подписанный manifest GET /api/skills/get-convex-convex-expert/manifest Подписанный lockfile GET /api/skills/get-convex-convex-expert/lockfile

Протестировать

Использование «convex-expert». Review a message-list query that filters the whole table and returns every matching row.

Ожидаемый результат:

Add a schema index for the conversation identifier.
Replace the full-table filter with an indexed query.
Paginate results and validate both arguments and returns.

Использование «convex-expert». Plan adding a required status field to an existing populated table.

Ожидаемый результат:

Add the field as optional, deploy compatibility changes, backfill existing records, verify completion, then make the validator required.

Использование «convex-expert». Review a public mutation used only by a scheduled backend task.

Ожидаемый результат:

Convert the mutation to an internal function and update the scheduled task reference. Keep public access only when a client requires it.

Аудит безопасности

Высокий риск

v1 • 07.09.2026 Открыть версионный отчет

Most detections are Markdown backticks around API names, not shell execution. The verification rule does execute project tools and can deploy code or rewrite local Convex configuration without explicit approval.

Просканировано файлов

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (3)

Высокий

SKILL.md:38

Environment file access

- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc

The text acknowledges that the anonymous Convex command can rebind .env.local. This is a concrete local environment configuration change.

Высокий

SKILL.md:38

Environment variant files

- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc

The workflow conditionally enables anonymous mode and states that this operation can rewrite .env.local. That creates a direct environment-file integrity risk.

Высокий

SKILL.md:38

Deployment Without Explicit Approval

The skill requires pushing changes and permits anonymous deployment creation. This can upload project code and alter cloud state without explicit user confirmation.

Line 38 directly requires a successful push and provides commands for authenticated or anonymous deployment. No confirmation step is specified.

Пункты проверки возможностей (1)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:38

Ruby/shell backtick execution

- SELF-VERIFY RULE — before declaring backend work done, verify it compiles and pushes: run `npx tsc

The line explicitly directs the agent to run npx commands and push backend changes to a deployment. These commands can execute project tooling and change local or remote state.

Факторы риска

⚙️ Внешние команды (8)

SKILL.md:3 SKILL.md:24 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:37 SKILL.md:38

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/get-convex-convex-expert/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/get-convex-convex-expert/security.svg)](https://skillstore.io/skills/get-convex-convex-expert?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/get-convex-convex-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/get-convex-convex-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/get-convex-convex-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

get-convex. (2026). convex-expert security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/get-convex-convex-expert/audits/1

Цитата BibTeX

@techreport{get-convex-get-convex-convex-expert-2026,
  author = {get-convex},
  title = {convex-expert security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/get-convex-convex-expert/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "convex-expert security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "get-convex"
date-released: "2026-09-07"
url: "https://skillstore.io/skills/get-convex-convex-expert/audits/1"
identifiers:
  - type: other
    value: "skillstore:get-convex-convex-expert:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Create a Convex Feature

Design validated functions, indexes, and schema changes for a new application workflow.

Review Backend Reliability

Find unbounded reads, invalid imports, missing validators, and unsafe schema migrations.

Resolve Deployment Errors

Interpret validation, schema, import, and runtime errors from Convex development checks.

Попробуйте эти промпты

Explain a Convex Function

Explain this Convex function and identify its arguments, return value, database access, and visibility: [function].

Design a Data Model

Design a Convex schema and indexes for [feature]. Include validators, relationships, query paths, and migration notes.

Review a Convex Directory

Review [files] for validators, imports, indexes, bounded reads, internal visibility, runtime separation, and safe schema evolution.

Plan a Production Migration

Plan a staged Convex migration for [change]. Address compatibility, backfill, indexes, rollback, tests, and deployment approval.

Лучшие практики

Provide the schema, related functions, expected behavior, and current errors.
Review generated Convex guidance before changing backend files.
Require approval before commands that deploy code or modify environment files.

Избегать

Do not request production deployment without identifying the target and approval boundary.
Do not omit project-specific authorization and data access requirements.
Do not treat generated recommendations as a substitute for tests and migration validation.

Часто задаваемые вопросы

What Convex code can this skill review?

It covers schemas, indexes, queries, mutations, actions, HTTP endpoints, scheduled jobs, storage, authentication wiring, and components.

Does it write Convex functions?

Yes. It can create object-form functions with argument and return validators using the project context.

Can it improve query performance?

It identifies full-table scans, recommends indexes, and uses pagination or bounded reads where appropriate.

Will it deploy changes automatically?

The source workflow requests deployment verification. Users should require explicit approval before any local or cloud state change.

Does it support schema migrations?

It recommends staged changes, optional fields, backfills, and later validator tightening for populated tables.

What context produces the best results?

Provide the current schema, related functions, generated guidance, requirements, errors, and deployment constraints.

Сведения для разработчиков

Автор

get-convex

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/get-convex/agent-skills/tree/c41ece22681a50d326e54f30d24148a6d46d0c3c/skills/convex-expert

Ссылка

d9e5ab86dafd32a1ddde9b8b4fde177589b55b95

Актуальность поддержки

08.09.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md