Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bntvllnt/agent-skills --skill convexgit clone --depth 1 https://github.com/bntvllnt/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bntvllnt/agent-skills/convex)<a href="https://agentmods.dev/skills/bntvllnt/agent-skills/convex"><img src="https://agentmods.dev/badge/skills/bntvllnt/agent-skills/convex/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bntvllnt/agent-skills/convex"><img src="https://agentmods.dev/badge/skills/bntvllnt/agent-skills/convex.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00160 | $0.03031 |
| Opus 5 | $0.00080 | $0.01515 |
| Sonnet 5 | $0.00032 | $0.00606 |
| Haiku 4.5 | $0.00016 | $0.00303 |
Grade A, and why
convex scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 230 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Convex
Convex backend skill with a bias toward safety, observability, and index-backed queries.
Upstream Skills (Delegate When Available)
For canonical Convex content, this skill delegates to the official get-convex/agent-skills collection.
- Repo: https://github.com/get-convex/agent-skills
- Source of truth: each upstream skill's
SKILL.mdandreferences/
Routing precedence (use first available, in order):
- Upstream skill installed locally →
npx skills add get-convex/agent-skills - WebFetch the upstream
SKILL.mdfrom the raw URL below. Some upstream skills have areferences/subdirectory (e.g.convex-setup-auth,convex-create-component,convex-migration-helper,convex-performance-audit); follow internal paths the same way:https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/<skill>/references/<file>.convex-quickstartis single-file (SKILL.md only). - Fall back to the matching local reference
URLs track main. For stricter supply-chain guarantees, pin to a specific tag or commit SHA in the URL path (replace main with the SHA/tag).
Or refresh the official Convex AI files in the project itself:
npx convex ai-files install
Delegation map:
| Task | Upstream skill | Fetch URL (raw SKILL.md) |
Local fallback |
|---|---|---|---|
| New project / scaffold / add Convex | convex-quickstart |
https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/convex-quickstart/SKILL.md | references/quickstart.md |
| Authentication setup | convex-setup-auth |
https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/convex-setup-auth/SKILL.md | references/auth-setup.md |
| Building a reusable component | convex-create-component |
https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/convex-create-component/SKILL.md | references/components.md |
| Plan or run a migration | convex-migration-helper |
https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/convex-migration-helper/SKILL.md | references/migrations.md |
| Investigate performance issues | convex-performance-audit |
https://raw.githubusercontent.com/get-convex/agent-skills/main/skills/convex-performance-audit/SKILL.md | references/performance.md |
What ships with it
24 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- checklists/validation.md 2.0 KB
- README.md 1.7 KB
- references/auth-providers/better-auth.md 9.2 KB
- references/auth-providers/convex-auth.md 2.5 KB
- references/auth-setup.md 3.7 KB
- references/cli-help.md 379 B
- references/cli.md 2.5 KB
- references/components.md 9.0 KB
- references/ecosystem.md 2.4 KB
- references/environments.md 9.3 KB
- references/file-storage.md 776 B
- references/mcp.md 3.9 KB
- references/migrations.md 9.0 KB
- references/parallel-worktrees.md 29 KB
- references/patterns/auth.md 1.9 KB
- references/patterns/functions.md 4.7 KB
- references/patterns/http.md 674 B
- references/patterns/schemas.md 2.8 KB
- references/patterns/workflows.md 982 B
- references/performance.md 8.9 KB
- references/quickstart.md 6.1 KB
- references/style.md 2.2 KB
- references/testing.md 1.4 KB
- references/troubleshooting.md 1.1 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 230 lines · 160 tokens per session scan A d6dbe94c1b12
convex is a skill published in the GitHub repository bntvllnt/agent-skills (16 stars, last pushed 3mo ago), licensed MIT. It adds 160 tokens to every session and 3,031 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
go-database
Use when writing, reviewing, or debugging Go code that talks to a SQL database (PostgreSQL, MySQL, MariaDB, SQLite). Covers library choice (database/sql, sqlx, sqlc, pgx, GORM trade-offs), parameterized queries, context propagation, NULL handling, scanning, transactions and isolation, connection pool tuning, and…
django-expert
Expert Django backend development guidance. Use when creating Django models, views, serializers, or APIs; debugging ORM queries or migrations; optimizing database performance; implementing authentication; writing tests; or working with Django REST Framework. Follows Django best practices and modern patterns.
supabase
Use when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies…
kotlin-backend-jpa-entity-mapping
Model Kotlin persistence code correctly for Spring Data JPA and Hibernate. Covers entity design, identity and equality, uniqueness constraints, relationships, fetch plans, and common ORM (Object-Relational Mapping) traps specific to Kotlin. Use when creating or reviewing JPA (Java Persistence API) entities, diagnosing…
yida-data-management
A tool for querying, adding, and updating Yida form records, child tables, process records, and task-center data. It keeps ordinary forms and approval workflows on their separate data interfaces.
cmux-backend
Backend TypeScript and Cloud VM development rules for cmux. Use when editing web/app/api, web/services, backend scripts, Cloud VM lifecycle, provider integrations, Postgres, Stack Auth pricing gates, migrations, or provider image build scripts.