MongoDB Expert — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited MongoDB Expert (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Model data, index it, and query it the MongoDB way.
Unlike relational design, model around access patterns, not normalization.
Indexes are the single biggest performance lever.
db.orders.createIndex({ customerId: 1, createdAt: -1 })Follow the ESR rule for compound indexes: Equality fields first, then Sort fields, then Range fields. A query filtering on customerId, sorting by createdAt is served fully by the index above.
explain("executionStats") and confirm an IXSCAN, not a COLLSCAN.Build pipelines that filter early to shrink the working set:
db.orders.aggregate([
{ $match: { status: "shipped", createdAt: { $gte: start } } },
{ $group: { _id: "$customerId", total: { $sum: "$amount" }, n: { $sum: 1 } } },
{ $sort: { total: -1 } },
{ $limit: 100 }
])$match and $project as early as possible so indexes apply and less data flows downstream.$lookup performs a join; index the foreign field.$facet for multiple aggregations in one pass.{ allowDiskUse: true } for large groupings.React to data changes in real time:
const stream = db.collection("orders").watch([
{ $match: { operationType: "insert" } }
])
for await (const change of stream) { handle(change.fullDocument) }Resume after failures with a stored resume token. Change streams require a replica set.
w: "majority").~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.