convex-file-storage
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides guidelines for secure file storage management, correctly implementing authentication checks (e.g., ctx.auth.getUserIdentity()) before allowing sensitive operations like generating upload URLs or deleting files.\n- [SAFE]: No hardcoded credentials or secrets were found. The skill demonstrates best practices by utilizing environment variables for API keys (e.g., OPENAI_API_KEY) and configuration settings (e.g., CLIENT_ORIGIN).\n- [SAFE]: External network requests are restricted to fetching data (such as AI-generated images or files for storage) as part of the skill's primary functionality. No remote code execution or script downloads were detected.\n- [SAFE]: No obfuscation, privilege escalation attempts, or persistence mechanisms were identified in the provided files.
Audit Metadata