convex-nextjs
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npmandnpxto interact with the Convex CLI and manage project dependencies. These are standard operations for the described purpose. - [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
convexpackage vianpm. Convex is a well-known service, and the download is performed through the official registry. - [SAFE]: A validation script
scripts/validate_project.pyis provided to check the project's configuration. This script performs local file system reads of project files (likepackage.jsonand.env.local) to verify setup and does not perform any network operations or access sensitive system paths. - [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found across the skill's files and documentation.
Audit Metadata