convex-authz
convex-authz is an agent skill published by get-convex. It lives in the get-convex/agent-skills repository, which has 68 GitHub stars and is licensed under Apache-2.0; we last read it on 2026-09-16.
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.
Install
skills is a generic installer for any repository of Claude agent skills -- it reads get-convex/agent-skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.
npx skills add get-convex/agent-skills
Maintenance
Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.
Common questions about convex-authz
- What does convex-authz do?
- Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking data by a client-supplied id, and writes into a parent/container the caller doesn't own. Scans for the 4 shapes, applies requireIdentity/requireOwner, verifies with tsc. TRIGGER on 'secure my app', 'audit auth/authz', 'who can access this data'. SKIP when there is no convex/ directory.
- How do I install convex-authz?
- Run npx skills add get-convex/agent-skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
- Who publishes convex-authz?
- get-convex.
- Is convex-authz maintained, and what licence does it use?
- Its repository has 68 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-13. The repository declares the Apache-2.0 licence.