convex-security-audit은(는) 무엇을 하나요?
권한 부여(authorization) 로직, 데이터 접근 경계(data access boundaries), 액션 격리(action isolation), 속도 제한(rate limiting), 민감 작업 보호에 대한 심층 보안 검토 패턴
권한 부여 로직, 데이터 접근 경계, 액션 격리, 속도 제한, 민감 작업 보호에 대한 심층 보안 검토 패턴
이 스킬은 Convex 애플리케이션의 보안 취약점을 심층 분석하고 방어 패턴을 제공합니다. 개발자가 권한 부여(authorization) 로직에서 발생할 수 있는 일반적인 실수, 데이터 접근 경계 위반, 액션 격리 부족, 속도 제한 미비 등과 같은 보안 문제를 식별하고 수정할 수 있도록 안내합니다. Convex 플랫폼의 특수성을 고려하여 `ctx.auth`, `ctx.db` 등 고유한 API를 올바르게 사용하는 방법과 외부 액션에서의 보안 격리 기법을 중점적으로 다룹니다. CI/CD 파이프라인에 통합하거나 코드 리뷰 시 보안 체크리스트로 활용하기에 적합하며, 여러분의 Convex 기반 프로젝트를 안전하게 유지하는 데 도움을 줍니다.
npx skills add https://github.com/waynesutton/convexskills/tree/main/skills/convex-security-auditInstalled? Explore more 코딩 & 개발 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
권한 부여(authorization) 로직, 데이터 접근 경계(data access boundaries), 액션 격리(action isolation), 속도 제한(rate limiting), 민감 작업 보호에 대한 심층 보안 검토 패턴
This repo contains 13 individual skills — each has its own dedicated page.
Prevent feature creep when building software, apps, and AI-powered products. Use this skill when planning features, reviewing scope, building MVPs, managing backlogs, or when a user says "just one more feature." Helps developers and AI agents stay focused, ship faster, and avoid bloated products.
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration
Guidelines for building production-ready Convex apps covering function organization, query patterns, validation, TypeScript usage, error handling, and the Zen of Convex design philosophy
How to create, structure, and publish self-contained Convex components with proper isolation, exports, and dependency management
Scheduled function patterns for background tasks including interval scheduling, cron expressions, job monitoring, retry strategies, and best practices for long-running tasks
Complete file handling including upload flows, serving files via URL, storing generated files from actions, deletion, and accessing file metadata from system tables
Writing queries, mutations, actions, and HTTP actions with proper argument validation, error handling, internal functions, and runtime considerations
External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation
Schema migration strategies for evolving applications including adding new fields, backfilling data, removing deprecated fields, index migrations, and zero-downtime migration patterns
Patterns for building reactive apps including subscription management, optimistic updates, cache behavior, and paginated queries with cursor-based loading
Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.