convex-security-audit 是做什麼的？
用於授權邏輯、資料存取邊界、動作隔離、速率限制以及保護敏感操作的深層安全審查模式。
針對授權邏輯、資料存取邊界、動作隔離、速率限制以及保護敏感操作，提供深層安全審查模式。
此技能旨在對 Convex 應用程式執行深入的安全審查，專注於授權邏輯、資料存取邊界、動作隔離、速率限制以及保護敏感操作等關鍵領域。它為開發者和 AI 代理提供了結構化的模式來識別和減輕常見的安全漏洞，例如不安全的直接物件參考 (IDOR)、SQL 注入、伺服器端請求偽造 (SSRF)，以及不當的速率限制。技能涵蓋審查資料驗證、確保正確的資料隔離、防止未授權的操作，以及保護像管理員金鑰或付款處理等敏感操作。它支援各種平台，包括 Convex 和一般的 Node.js 環境，並可以透過提供像是 `convex-schema.ts`、`convex/auth.config.ts` 和各種動作檔案的指定文件路徑來作為自訂指令使用。此技能以剖析 Convex 的特定 API 和模式而設計，但它提供的一般安全原則可應用於其他無伺服器或資料庫後端。使用方式包括明確指定要審查的檔案，以及輸出結構化的安全審查報告。
npx skills add https://github.com/waynesutton/convexskills/tree/main/skills/convex-security-auditInstalled? Explore more 程式設計與開發 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
用於授權邏輯、資料存取邊界、動作隔離、速率限制以及保護敏感操作的深層安全審查模式。
This repo contains 13 individual skills — each has its own dedicated page.
Prevent feature creep when building software, apps, and AI-powered products. Use this skill when planning features, reviewing scope, building MVPs, managing backlogs, or when a user says "just one more feature." Helps developers and AI agents stay focused, ship faster, and avoid bloated products.
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration
Guidelines for building production-ready Convex apps covering function organization, query patterns, validation, TypeScript usage, error handling, and the Zen of Convex design philosophy
How to create, structure, and publish self-contained Convex components with proper isolation, exports, and dependency management
Scheduled function patterns for background tasks including interval scheduling, cron expressions, job monitoring, retry strategies, and best practices for long-running tasks
Complete file handling including upload flows, serving files via URL, storing generated files from actions, deletion, and accessing file metadata from system tables
Writing queries, mutations, actions, and HTTP actions with proper argument validation, error handling, internal functions, and runtime considerations
External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation
Schema migration strategies for evolving applications including adding new fields, backfilling data, removing deprecated fields, index migrations, and zero-downtime migration patterns
Patterns for building reactive apps including subscription management, optimistic updates, cache behavior, and paginated queries with cursor-based loading
Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes
Quick security audit checklist covering authentication, function exposure, argument validation, row-level access control, and environment variable handling
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.