convex-functions

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Convex Functions skill demonstrates coherent purpose-capability alignment with its stated goals of providing robust function definitions, argument validation, error handling, and runtime patterns within Convex. The installation/execution footprint is minimal and uses standard Convex framework constructs—no unverifiable binaries, credential harvesting, or suspicious data exfiltration patterns are present. Data flows are consistent with typical Convex usage: internal validations, reads/writes to the database, and controlled external API interactions via actions and HTTP actions. Overall, the risk profile is low to moderate (benign to low-suspicion) with normal security considerations around external API calls and webhook handling. No active indicators of malicious activity or policy violations were found.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 01:01 PM
Package URL
pkg:socket/skills-sh/JStaRFilms%2FVibeCode-Protocol-Suite%2Fconvex-functions%2F@29a30f400853ef8413d9ff0bda583416ed1bb9bd