Convex Feature Verification
Prove a Convex feature works by seeding data, testing as multiple users, and checking that unauthorized access is refused.
- Repository
- openclaw/clawhub
- Stars
- 9,546
- Licence
- MIT
- Files
- 1 file
What it does
When installed, the agent can verify a specific Convex backend feature the user just built. It seeds realistic test data, calls the feature as the owner, as a different logged-in user, and as an anonymous caller, then checks that the owner gets the right results and that outsiders are refused. It runs these checks in-process with the convex-test library, so no live deployment is needed. It also reports any check that fails, since a failed refusal check usually means a real access-control bug.
Great for
- Developers building Convex apps who want evidence that permissions and data scoping actually work
- Teams that want negative (should-be-refused) tests, not just happy-path tests
- Developers who already use vitest and want Convex functions covered by it
Skip it if
- Projects that just need a general test framework set up; the skill itself says that job belongs to a separate 'test' capability (reason: it only targets a specific built feature)
- Non-Convex backends (reason: the workflow depends on convex-test and Convex identity handling)
- Replacing a security review; it checks the cases it writes tests for, not every possible attack (reason: coverage depends on the scenarios chosen)
Try asking
- “Prove that only the owner can cancel an order in my new Convex mutation, and that other users get a forbidden error”
- “Verify that my notes list query returns only the signed-in user's notes and never another user's”
- “Set up convex-test for this feature and write positive and negative tests for the new comments mutation”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 1 original files, the MIT licence and an attribution note.
convex-verify.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip convex-verify.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip convex-verify.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Name the exact Convex query, mutation or action and state who should be allowed to call it, so the agent does not have to guess the intended rules.
- Review the generated tests and the vitest.config.ts before running them, since the agent will execute them locally.
- If a negative test fails, fix the function's access check rather than loosening the test; the skill is designed to work that way.
What's inside
- SKILL.md
Redistributed unmodified from openclaw/clawhub under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.