convex-nextjs

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npm and npx to interact with the Convex CLI and manage project dependencies. These are standard operations for the described purpose.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the convex package via npm. Convex is a well-known service, and the download is performed through the official registry.
  • [SAFE]: A validation script scripts/validate_project.py is provided to check the project's configuration. This script performs local file system reads of project files (like package.json and .env.local) to verify setup and does not perform any network operations or access sensitive system paths.
  • [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found across the skill's files and documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 05:49 AM