meteor-deployment
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Meteor installation script at
https://install.meteor.com/for use within Docker build environments.\n- [REMOTE_CODE_EXECUTION]: The provided Dockerfile includes a command to fetch and execute the Meteor installation script (curl -sSL https://install.meteor.com/ | sh). This is the standard, documented method for installing the Meteor CLI toolchain from the vendor.\n- [INDIRECT_PROMPT_INJECTION]: The skill describes how to build deployment commands using user-provided parameters. While this is a standard operational surface, it represents an attack vector for indirect prompt injection.\n - Ingestion points: User prompts specifying application names, deployment regions, and environment variable values.\n
- Boundary markers: None explicitly defined to delimit user-supplied strings.\n
- Capability inventory: The skill utilizes shell-based execution via the
meteoranddockerCLI tools.\n - Sanitization: Not addressed in the instructions.
Audit Metadata