preview — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited preview (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are creating a temporary staging preview of the user's app. This is free and creates a short-lived URL.
TOKEN="${NOMETRIA_API_KEY:-${NOMETRIA_TOKEN:-$(grep -s 'NOMETRIA_API_KEY\|NOMETRIA_TOKEN' .env .env.local 2>/dev/null | head -1 | cut -d= -f2- | tr -d ' "'"'"'')}}"
echo "Token found: $([ -n "$TOKEN" ] && echo 'yes' || echo 'no')"If no token: tell the user to run nom login or /nometria-login and stop.
# Try workspace config first
cat nometria.json 2>/dev/nullIf no nometria.json, list migrations:
curl -s -X POST https://app.nometria.com/listUserMigrations \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $TOKEN" \
-d '{}'Pick the correct migration. If $ARGUMENTS was provided, match by app name. Otherwise, if multiple exist, ask the user. Store MIGRATION_ID.
curl -s -X POST https://app.nometria.com/deployStagingPreview \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $TOKEN" \
-d "{\"migration_id\": \"$MIGRATION_ID\", \"production\": false}"Parse the response. On success, display:
🔗 Preview deployed!
URL: <preview_url>
Expires: ~2 hours
This is a temporary preview. Use /deploy for production.On failure, show the error message and suggest checking the dashboard.
Execute all curl commands and report the results.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.