check-updates

Check the CURRENT Convex app's pinned components against the latest recommended versions and offer to upgrade them — e.g. the passkey auth component's new email-first sign-in. TRIGGER when the user runs /check-updates or $check-updates, asks 'are my components up to date', 'any updates', 'upgrade auth', 'upgrade my components', or wants the newest features after a quickstart. Applies each upgrade behind a build gate (verify-or-revert) with the user's consent.

Ir para a instalação

Repositório: get-convex/convex-kimi-plugin
Última atividade na origem: 22 de julho de 2026 às 00:42
Idioma detectado do SKILL.md: inglês
Estrelas: 1
Forks: 0

Opções de instalação

Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.

npx skills add https://github.com/get-convex/convex-kimi-plugin --skill check-updates

O comando permanece em uma só linha. Role horizontalmente para revisá-lo antes de copiar.

Prefere uma cópia local? Baixe os arquivos disponíveis atualmente no SkillsMP.

Revise os arquivos de origem

Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.

SKILL.md

Instruções da origem · Visualização somente leitura

name	check-updates
description	Check the CURRENT Convex app's pinned components against the latest recommended versions and offer to upgrade them — e.g. the passkey auth component's new email-first sign-in. TRIGGER when the user runs /check-updates or $check-updates, asks 'are my components up to date', 'any updates', 'upgrade auth', 'upgrade my components', or wants the newest features after a quickstart. Applies each upgrade behind a build gate (verify-or-revert) with the user's consent.
license	Apache-2.0

Check + apply component updates

Run from the app's project root (where package.json lives — the convex-app/ subdir for a quickstart). Detect stale components against the anteater registry:

curl -fsSL https://basic-anteater-667.convex.site/check-updates.mjs -o /tmp/cu.mjs && node /tmp/cu.mjs

COMPONENTS_UP_TO_DATE → tell the user everything's current. Done.
COMPONENTS_STALE=<n> + a JSON array → for each entry, summarize for the user: the component, installed → current, the summary (what's new), and whether it's breaking. Then ASK before changing anything — "Upgrade <name> to get
? [y/n]". Never upgrade without an explicit yes.

On a yes, apply that entry's migration:

Install the new ref (migration.install) with the project's package manager.
Apply migration.steps in order — the call-site changes. Read the existing code first; make the minimal change each step describes. Delegate any convex/ edits to the convex-expert skill/subagent.
GATE — verify or revert. Run every command in migration.gate (e.g. pnpm exec tsc --noEmit, pnpm exec next build). If ANY fails, revert (git checkout -- ., or reinstall the old ref) and tell the user it didn't apply cleanly — never leave the app half-migrated.
Smoke — give the user the migration.smoke check to run (the runtime behavior the build gate can't prove), e.g. register → sign out → sign in by the same email.

Rules:

breaking: true needs extra care: confirm explicitly, snapshot first (commit/branch), and if the steps aren't mechanical, ask the user rather than guessing.
Don't auto-publish. If the app is already live on *.convex.app / a custom domain, the upgrade only reaches the live site on re-publish — confirm before re-deploying (no surprise downtime on a live domain).
One component at a time; gate each before the next.

Voltar à pesquisa Voltar à instalação

convex-authz

Audit and harden a Convex app's authorization: identity-from-arg impersonation, missing per-document ownership checks, public queries leaking PII/financial data by a client-supplied id, and writes into a parent/container the caller doesn't own — the single largest real-defect cluster measured against generated Convex backends (44 of 214). Runs a deterministic scan for the 4 shapes, then applies the canonical requireIdentity/requireOwner pattern, then verifies with tsc. TRIGGER on 'secure my app', 'audit auth', 'add login', 'who can access this data', or an explicit 'audit my authz'. NOT always-on. SKIP when there is no convex/ directory.

2026-08-28

convex-expert

Convex backend rules — consult this whenever writing or editing any code inside a convex/ directory (schemas, queries, mutations, actions, HTTP endpoints, crons, file storage, auth, component installation). TRIGGER before touching convex/ functions, so the code uses the object-form syntax, validators, indexes, and component patterns that generic models get wrong.

2026-08-28

convex-reviewer

Review Convex code for security, auth, validators, performance, and best practices. TRIGGER when the user asks to review/audit Convex code, or after writing convex/ functions you want checked. Applies the Convex-specific review checklist (auth checks, args/returns validators, internal vs public, indexes-not-filter, OCC conflicts, pagination).

2026-07-22

Ver todas deste repositório

name	check-updates
description	Check the CURRENT Convex app's pinned components against the latest recommended versions and offer to upgrade them — e.g. the passkey auth component's new email-first sign-in. TRIGGER when the user runs /check-updates or $check-updates, asks 'are my components up to date', 'any updates', 'upgrade auth', 'upgrade my components', or wants the newest features after a quickstart. Applies each upgrade behind a build gate (verify-or-revert) with the user's consent.
license	Apache-2.0

Check + apply component updates

Run from the app's project root (where package.json lives — the convex-app/ subdir for a quickstart). Detect stale components against the anteater registry:

curl -fsSL https://basic-anteater-667.convex.site/check-updates.mjs -o /tmp/cu.mjs && node /tmp/cu.mjs

COMPONENTS_UP_TO_DATE → tell the user everything's current. Done.
COMPONENTS_STALE=<n> + a JSON array → for each entry, summarize for the user: the component, installed → current, the summary (what's new), and whether it's breaking. Then ASK before changing anything — "Upgrade <name> to get
? [y/n]". Never upgrade without an explicit yes.

On a yes, apply that entry's migration:

Install the new ref (migration.install) with the project's package manager.
Apply migration.steps in order — the call-site changes. Read the existing code first; make the minimal change each step describes. Delegate any convex/ edits to the convex-expert skill/subagent.
GATE — verify or revert. Run every command in migration.gate (e.g. pnpm exec tsc --noEmit, pnpm exec next build). If ANY fails, revert (git checkout -- ., or reinstall the old ref) and tell the user it didn't apply cleanly — never leave the app half-migrated.
Smoke — give the user the migration.smoke check to run (the runtime behavior the build gate can't prove), e.g. register → sign out → sign in by the same email.

Rules:

breaking: true needs extra care: confirm explicitly, snapshot first (commit/branch), and if the steps aren't mechanical, ask the user rather than guessing.
Don't auto-publish. If the app is already live on *.convex.app / a custom domain, the upgrade only reaches the live site on re-publish — confirm before re-deploying (no surprise downtime on a live domain).
One component at a time; gate each before the next.

check-updates

Informações da origem

Opções de instalação

Revise os arquivos de origem

Check + apply component updates

Mais deste repositório

Check + apply component updates

Mais deste repositório