40Medium
The skill deceptively claims to "plan
Behavior Analysis
Mismatch detected — The skill's stated purpose claims it 'Plans and executes' migrations, but its actual content is purely informational and instructional. It describes *how* a user can plan and execute migrations, rather than performing these actions itself.
Claims to do
Convex Migration Helper: Safely migrate Convex schemas and data when making breaking changes.
Actually does
This skill provides comprehensive instructions and best practices for performing schema and data migrations in Convex applications. It details a multi-deploy workflow (widen-migrate-narrow), explains key concepts, and recommends using the `@convex-dev/migrations` component. It also outlines common migration patterns, pitfalls, and a checklist for safe migrations.
Skill Info
Nameget-convex/agent-skills/convex-migration-helper
Registrygithub
Version4de8fba05b0a
PURLpkg:github/get-convex/agent-skills@4de8fba05b0a?skill=convex-migration-helper
Stars22
Installs21,500
Source
SHA-2562e9c0da3f018...
SHA-179a28985a38d...
MD568459b08cbc7...
TLSH47c192e97240...
ssdeep96:PNbBYAlGc...
Size6,057 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/get-convex/agent-skills/tree/main/skills/convex-migration-helper21,500 installs
Skills.shDocs
npx skills add https://github.com/get-convex/agent-skills --skill convex-migration-helperAssessments (1)
AI Agent Traps ↗Description Mismatchmediumdescription mismatch
The skill's stated purpose claims it 'Plans and executes' migrations, but its actual content is purely informational and instructional. It describes *how* a user can plan and execute migrations, rather than performing these actions itself.
85% confidence
Stated purpose: 'Plans and executes safe Convex schema and data migrations...'. Actual content: The entire document consists of explanatory text, code examples, and checklists, without any executable commands or automation within the skill itself.
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/get-convex/agent-skills/convex-migration-helper)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/get-convex/agent-skills/convex-migration-helper"><img src="https://mondoo.com/ai-agent-security/api/badge/github/get-convex/agent-skills/convex-migration-helper.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/get-convex/agent-skills/convex-migration-helper.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow