A quick security checklist helps keep your Convex app safe. It covers authentication, function exposure, argument validation, row-level access control, and environment variable handling. Developers can use this audit to find and fix common security gaps.
Each section lists clear steps to follow. For example, always check that sensitive queries require a user identity. Use internal functions for operations that should not be public. Validate all inputs with strict rules. Make sure users can only see their own data. Store secrets in environment variables, never in code.
This skill is built for Convex applications. It gives you a repeatable way to review your app before going live. Use it during development or as part of your deployment process.
Global
mkdir -p ~/.claude/skills/convex-security-checkProject
mkdir -p .claude/skills/convex-security-checkSource Repository
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Gws Modelarmor Create Templategoogleworkspace/cli
Create new templates for Google Model Armor to protect AI apps from harmful content
Gws Modelarmor Sanitize Promptgoogleworkspace/cli
Clean user prompts safely with Google Model Armor templates