convex-quickstart
Facilitates quick setup of Convex projects, enabling developers to scaffold and integrate Convex into their applications efficiently.
Install this skill
or
64/100
Security score
The convex-quickstart skill was audited on Jun 4, 2026 and we found 12 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 82
Access to .env file
SourceSKILL.md
| 82 | - Write the deployment URL to `.env.local` |
low line 111
Access to .env file
SourceSKILL.md
| 111 | .env.local # CONVEX_URL / VITE_CONVEX_URL / NEXT_PUBLIC_CONVEX_URL |
medium line 135
Access to .env file
SourceSKILL.md
| 135 | Ask the user to run `npx convex dev` in their terminal. This handles login, creates the `convex/` directory, writes the deployment URL to `.env.local`, and starts the file watcher. See the notes in Pa |
low line 147
Access to .env file
SourceSKILL.md
| 147 | import.meta.env.VITE_CONVEX_URL as string, |
low line 153
Access to .env file
SourceSKILL.md
| 153 | const convex = new ConvexReactClient(import.meta.env.VITE_CONVEX_URL as string); |
low line 168
Access to .env file
SourceSKILL.md
| 168 | const convex = new ConvexReactClient(import.meta.env.VITE_CONVEX_URL as string); |
low line 188
Access to .env file
SourceSKILL.md
| 188 | const convex = new ConvexReactClient(process.env.NEXT_PUBLIC_CONVEX_URL!); |
medium line 236
Access to .env file
SourceSKILL.md
| 236 | `npx convex dev` writes the correct variable to `.env.local` automatically. |
medium line 242
Access to .env file
SourceSKILL.md
| 242 | Add `CONVEX_AGENT_MODE=anonymous` to `.env.local`, or set it inline: |
medium line 256
Access to .env file
SourceSKILL.md
| 256 | 3. `.env.local` contains the deployment URL |
medium line 346
Access to .env file
SourceSKILL.md
| 346 | - [ ] `.env.local` has the deployment URL |
low line 98
External URL reference
SourceSKILL.md
| 98 | Vite apps serve on `http://localhost:5173`, Next.js on `http://localhost:3000`. |
Scanned on Jun 4, 2026
View Security Dashboard