meteor-testing
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the user to install well-known, community-vetted packages (
meteortesting:mocha,@types/mocha) from official registries. - [SAFE]: The provided code examples follow security best practices, such as suggesting server-side guards (
Meteor.isServer) to prevent leaking logic to the client and recommending proper environment variable handling for CI (e.g., using GitHub Actions secrets or tracked non-secret fixtures). - [SAFE]: The remote command patterns (e.g., installing Meteor via
curl https://install.meteor.com/ | sh) are the official and standard installation methods for the platform. - [SAFE]: The skill explicitly warns against anti-patterns like hardcoding credentials or ignoring safety protocols by advising the use of deterministic test settings and non-secret tracked fixtures rather than local developer secrets.
Audit Metadata