convex-security-check は何をしますか？
認証、関数の公開範囲、引数の検証、行レベルアクセス制御、環境変数の取り扱いをカバーするクイックセキュリティ監査チェックリスト
認証、関数の公開範囲、引数の検証、行レベルアクセス制御、環境変数の取り扱いをカバーするクイックセキュリティ監査チェックリスト
このスキルは、Convex アプリケーションのセキュリティを迅速に監査するためのチェックリストを提供します。認証（例：auth().require() の使用確認）、関数の公開範囲（例：query/mutation が意図せず公開されていないか）、引数の検証（例：zod などによるスキーマ検証）、行レベルアクセス制御（例：query 内でのフィルタリング）、および環境変数の適切な取り扱い（例：API キーの公開防止）をカバーします。開発者は、このチェックリストに沿ってコードをレビューすることで、一般的なセキュリティ脆弱性を効率的に発見・修正できます。主に Convex プラットフォーム向けのスキルであり、CLI やエディタ統合を通じて利用可能です。
npx skills add https://github.com/waynesutton/convexskills/tree/main/skills/convex-security-checkInstalled? Explore more コーディング＆開発 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
認証、関数の公開範囲、引数の検証、行レベルアクセス制御、環境変数の取り扱いをカバーするクイックセキュリティ監査チェックリスト
This repo contains 13 individual skills — each has its own dedicated page.
Prevent feature creep when building software, apps, and AI-powered products. Use this skill when planning features, reviewing scope, building MVPs, managing backlogs, or when a user says "just one more feature." Helps developers and AI agents stay focused, ship faster, and avoid bloated products.
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration
Guidelines for building production-ready Convex apps covering function organization, query patterns, validation, TypeScript usage, error handling, and the Zen of Convex design philosophy
How to create, structure, and publish self-contained Convex components with proper isolation, exports, and dependency management
Scheduled function patterns for background tasks including interval scheduling, cron expressions, job monitoring, retry strategies, and best practices for long-running tasks
Complete file handling including upload flows, serving files via URL, storing generated files from actions, deletion, and accessing file metadata from system tables
Writing queries, mutations, actions, and HTTP actions with proper argument validation, error handling, internal functions, and runtime considerations
External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation
Schema migration strategies for evolving applications including adding new fields, backfilling data, removing deprecated fields, index migrations, and zero-downtime migration patterns
Patterns for building reactive apps including subscription management, optimistic updates, cache behavior, and paginated queries with cursor-based loading
Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.