meteor-cli-installation

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documents the use of curl https://install.meteor.com/ | sh as a secondary installation method for Linux and macOS. While piping remote content to a shell is generally a high-risk pattern, this specific URL is the official, well-known installation endpoint for Meteor (a trusted vendor in this context). The skill correctly prioritizes the safer npx meteor command as the primary cross-platform method.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading the Meteor CLI and its dependencies from official sources including the npm registry (npx meteor) and install.meteor.com. These are established, official distribution channels for the Meteor project.
  • [COMMAND_EXECUTION]: The skill uses various CLI commands to manage the environment, such as meteor reset, npx meteor uninstall, and npm install -g meteor. These are standard operational commands for the framework. The instructions include significant safeguards, explicitly directing the agent to obtain user confirmation before executing any command that deletes state (like meteor reset --db or uninstall).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:04 PM