meteor-native

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill outlines a standard development workflow using the Meteor CLI and native mobile toolchains. It references official project documentation and source code from the meteor GitHub organization to support application building and deployment.\n- [INDIRECT_PROMPT_INJECTION]: The workflow involves an ingestion surface where the agent processes configuration data from project files.\n
  • Ingestion points: The agent is instructed to read files such as mobile-config.js, package.json, and Meteor platform files to understand the application state.\n
  • Capability inventory: The skill uses CLI tools for native builds and execution, including meteor, sdkmanager, and xcodebuild (referenced in references/toolchain-and-development.md).\n
  • Boundary markers: The instructions do not include specific delimiters or prompts to ignore natural language instructions that could be embedded in the project metadata.\n
  • Sanitization: There is no mention of sanitizing or validating the contents of the configuration files before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 11:55 AM
Security Audit — agent-trust-hub — meteor-native