meteor-security
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate security guidance for Meteor 3 applications, including the use of
check()for argument validation,this.userIdfor authentication guards, andDDPRateLimiterfor rate limiting. These instructions align with established security best practices for the Meteor framework. - [SAFE]: The skill references official documentation and resources from the 'meteor' organization on GitHub. These references are used to provide context and recipes for security-related packages like
browser-policyandoauth-encryption. - [SAFE]: All shell commands provided (e.g.,
meteor add browser-policy,meteor node -e ...) are standard operations for managing Meteor projects and generating secure configuration values. There is no evidence of remote code execution or suspicious external downloads. - [SAFE]: No obfuscation techniques, hidden URLs, or credential exfiltration patterns were found. The skill explicitly warns against insecure practices like storing secrets in public settings or using legacy
allow/denyrules.
Audit Metadata