meteor-cli-installation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the use of
curl https://install.meteor.com/ | shas a secondary installation method for Linux and macOS. While piping remote content to a shell is generally a high-risk pattern, this specific URL is the official, well-known installation endpoint for Meteor (a trusted vendor in this context). The skill correctly prioritizes the safernpx meteorcommand as the primary cross-platform method. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading the Meteor CLI and its dependencies from official sources including the npm registry (
npx meteor) andinstall.meteor.com. These are established, official distribution channels for the Meteor project. - [COMMAND_EXECUTION]: The skill uses various CLI commands to manage the environment, such as
meteor reset,npx meteor uninstall, andnpm install -g meteor. These are standard operational commands for the framework. The instructions include significant safeguards, explicitly directing the agent to obtain user confirmation before executing any command that deletes state (likemeteor reset --dboruninstall).
Audit Metadata