Skip to main content

convex-functions

Enables the creation of robust queries, mutations, and HTTP actions with validation and error handling for backend development.

Install this skill

or
83/100

Security score

The convex-functions skill was audited on Mar 1, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 152

Fetch to external URL

SourceSKILL.md
152const response = await fetch("https://api.email.com/send", {
medium line 44

Webhook reference - potential data exfiltration

SourceSKILL.md
44| HTTP Action | Via runQuery/runMutation | Yes | No | Webhooks, APIs |
medium line 190

Webhook reference - potential data exfiltration

SourceSKILL.md
190HTTP actions handle webhooks and external requests:
low line 200

Webhook reference - potential data exfiltration

SourceSKILL.md
200// Webhook endpoint
low line 202

Webhook reference - potential data exfiltration

SourceSKILL.md
202path: "/webhooks/stripe",
low line 208

Webhook reference - potential data exfiltration

SourceSKILL.md
208// Verify webhook signature
low line 215

Webhook reference - potential data exfiltration

SourceSKILL.md
215// Process webhook
low line 216

Webhook reference - potential data exfiltration

SourceSKILL.md
216await ctx.runMutation(internal.payments.handleWebhook, {
low line 152

External URL reference

SourceSKILL.md
152const response = await fetch("https://api.email.com/send", {
Scanned on Mar 1, 2026
View Security Dashboard