Skip to content

Back to the catalog

convex-authz

Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leakin

Open site Project Open in the app JSON README (API)

Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.

README

Loading documentation…

Details
Type
Agent skills
Topic
Security & identity
Publisher
get-convex
Source
skillssh
Category
Tools
Stars
68
Copies (forks)
12
Proposed changes
4
Last update
2026-10-27T01:34:32Z
Project status
Active
Language
TypeScript
License
Apache-2.0
Added
2026-08-30 15:21:15
Updated
2026-09-10 01:01:28
Source id
get-convex/agent-skills/convex-authz

More

Looking for something else?QuestionsContact