OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 1, 2026
Independent checks from skills.sh's audit partners.
This skill maps and explains Convex applications by reading project source files and deployment metadata. It operates as a read-only descriptive tool. The analysis identifies a potential surface for indirect prompt injection, as the skill processes user-provided source code which could contain malicious instructions designed to influence the agent's behavior.
Detected behaviors
No alerts
No issues