Edge Copy setup link
Skill evidence / Convex Authz

Convex Authz

Audit and harden a Convex app's authorization: identity-from-arg impersonation.

get-convex/agent-skillspinned 0aa1057
✓ Security state: reviewed

2 static scans, 0 counted findings.

Recorded for this package revision; Edge checks the exact bundle again when your agent loads it.

SKILL.md1 file · 9.0 KB
From get-convex’s public repository. Edge did not write or edit this skill.

What this skill does for you

Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.

Quoted from the skill description in the pinned source

Use it with Edge

Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the convex-authz skill from get-convex/agent-skills.

Paste it into Claude, ChatGPT, Codex or Cursor.

Or read the skill source first.

Try Convex Authz in your agent.

Audit and harden a Convex app's authorization: identity-from-arg impersonation.