convex-security-check 是做什麼的?
快速安全審查清單,涵蓋身份驗證、函式暴露、引數驗證、行級存取控制與環境變數處理
快速安全審查清單,涵蓋身份驗證、函式暴露、引數驗證、行級存取控制與環境變數處理
此技能提供一個專為 Convex 專案設計的快速安全審查清單。它協助開發者系統性地檢查應用程式的安全性,重點包括身份驗證機制是否正確實作、哪些函式被暴露給客戶端、引數驗證是否嚴謹、行級存取控制是否到位,以及環境變數是否妥善管理。適用於任何 Convex 後端開發工作,尤其適合在程式碼審查或部署前進行安全評估。該技能基於一個明確的 checklist 格式,讓使用者可以逐項確認並降低常見的安全風險。
npx skills add https://github.com/waynesutton/convexskills/tree/main/skills/convex-security-checkInstalled? Explore more 程式設計與開發 skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →
快速安全審查清單,涵蓋身份驗證、函式暴露、引數驗證、行級存取控制與環境變數處理
This repo contains 13 individual skills — each has its own dedicated page.
Prevent feature creep when building software, apps, and AI-powered products. Use this skill when planning features, reviewing scope, building MVPs, managing backlogs, or when a user says "just one more feature." Helps developers and AI agents stay focused, ship faster, and avoid bloated products.
Umbrella skill for all Convex development patterns. Routes to specific skills like convex-functions, convex-realtime, convex-agents, etc.
Building AI agents with the Convex Agent component including thread management, tool integration, streaming responses, RAG patterns, and workflow orchestration
Guidelines for building production-ready Convex apps covering function organization, query patterns, validation, TypeScript usage, error handling, and the Zen of Convex design philosophy
How to create, structure, and publish self-contained Convex components with proper isolation, exports, and dependency management
Scheduled function patterns for background tasks including interval scheduling, cron expressions, job monitoring, retry strategies, and best practices for long-running tasks
Complete file handling including upload flows, serving files via URL, storing generated files from actions, deletion, and accessing file metadata from system tables
Writing queries, mutations, actions, and HTTP actions with proper argument validation, error handling, internal functions, and runtime considerations
External API integration and webhook handling including HTTP endpoint routing, request/response handling, authentication, CORS configuration, and webhook signature validation
Schema migration strategies for evolving applications including adding new fields, backfilling data, removing deprecated fields, index migrations, and zero-downtime migration patterns
Patterns for building reactive apps including subscription management, optimistic updates, cache behavior, and paginated queries with cursor-based loading
Defining and validating database schemas with proper typing, index configuration, optional fields, unions, and migration strategies for schema changes
Deep security review patterns for authorization logic, data access boundaries, action isolation, rate limiting, and protecting sensitive operations
Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.
Control Eight Sleep pods (status, temperature, alarms, schedules).
BluOS CLI (blu) for discovery, playback, grouping, and volume.
Create, search, and manage Bear notes via grizzly CLI.
Capture frames or clips from RTSP/ONVIF cameras.
Search GIF providers with CLI/TUI, download results, and extract stills/sheets.