convex-security-audit
waynesutton1.6k installs
Know who can reach your backend and what to fix.
What it does
Audits a Convex backend and produces a severity-ranked findings report covering public functions, table access, and backend entry points.
When to use it
Use before launch or a major release, after a security incident, when access boundaries become unclear, or for a full backend security review.
How to use it
Give it a Convex codebase to audit; it produces a completed security report with findings and access inventories.
What you provide
- An existing project
Uses
Latest review
What you need · 1
Requires rg to run the prescribed searches that inventory public functions and locate security-sensitive code.
Access · 2
This skill
Convex
Read
Checks deployment environment secrets
@convex-dev/rate-limiter
Execute
Installs the rate limiter component