get-convex/agent-skills882 installs

convex-improve-convex-plugin

Q: How do I install this agent skill?

Run npx skills add https://github.com/get-convex/agent-skills --skill convex-improve-convex-plugin.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

Send this coding session's transcript to the Convex team for an AI post-mortem that improves the quickstart system.

How do I install this agent skill?

npx skills add https://github.com/get-convex/agent-skills --skill convex-improve-convex-plugin

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubfail
This skill downloads and executes remote scripts directly from a network source and uploads coding session transcripts to an external server. These behaviors present significant risks of arbitrary code execution and exfiltration of sensitive development data.
Socketwarn
1 alert: gptSecurity
Snykwarn
Risk: MEDIUM · 1 issue

What does this agent skill do?

improve-convex-plugin

Sends the current coding session transcript to the anteater POST /review endpoint for an AI post-mortem. The review returns structured findings (ambiguous instructions, agent-stuck patterns, tooling failures, wins) targeted at the runbook, bootstrap script, skills, and components — not end-user data. Sharing is opt-in: the anteater-served helper asks once (Always / Just this once / Never) and remembers the choice.

Workflow

Run the anteater-served helper: curl -fsSL "<anteater>/send-transcript" | bash -s -- --idea "<one-line app idea from this session>".
If it prints CONSENT_REQUIRED (exit 4), the user has not chosen yet — ask them to share Always, Just this once, or Never, then re-run appending --consent always|once|never. Do not send until they answer.
Watch for output markers: REVIEW_SOURCE (transcript found), REVIEW_SUBMITTED id=... (accepted), REVIEW_DONE status=done (findings ready).
Summarize the highest-severity findings for the user: title → target → suggestedFix, then wins. Keep the summary about the system, not the user's data.

Rules

Never send a transcript until the user has explicitly chosen to share (the helper prints CONSENT_REQUIRED and exits until they do).
REVIEW_NO_TRANSCRIPT means no Claude/Codex .jsonl was found — tell the user.
Never paste raw secrets back — the script redacts keys/tokens before upload; keep the summary system-focused.
This is a system-improvement loop, not end-user feature feedback.

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/get-convex/agent-skills/convex-improve-convex-plugin">View convex-improve-convex-plugin on skillZs</a>