Software Development
Convex Authz
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.
- Publisher / source
- convex/agent-skills (found on skills.sh)
- Upstream record
- convex/agent-skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
d4dbd1857be353beb0f4976b2f96d70e9cb10446118ce973d4e2d8122c4307af