meteor-security

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate security guidance for Meteor 3 applications, including the use of check() for argument validation, this.userId for authentication guards, and DDPRateLimiter for rate limiting. These instructions align with established security best practices for the Meteor framework.
  • [SAFE]: The skill references official documentation and resources from the 'meteor' organization on GitHub. These references are used to provide context and recipes for security-related packages like browser-policy and oauth-encryption.
  • [SAFE]: All shell commands provided (e.g., meteor add browser-policy, meteor node -e ...) are standard operations for managing Meteor projects and generating secure configuration values. There is no evidence of remote code execution or suspicious external downloads.
  • [SAFE]: No obfuscation techniques, hidden URLs, or credential exfiltration patterns were found. The skill explicitly warns against insecure practices like storing secrets in public settings or using legacy allow/deny rules.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 12:45 PM