skills/alisonaquinas/llm-ci-dev/nvm/Gen Agent Trust Hub

nvm

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation commands for nvm and fnm which fetch scripts from the official nvm-sh repository and Vercel's hosting infrastructure.
  • [COMMAND_EXECUTION]: Instructions detail the use of standard nvm commands for environment management, including version installation, aliasing, and executing subprocesses with specific Node.js versions.
  • [PERSISTENCE]: Documents standard shell profile integration (e.g., modifying .bashrc or .zshrc) required to maintain the nvm environment across shell sessions.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the use of project-specific .nvmrc files to control the Node.js environment.
  • Ingestion points: Reads version strings from .nvmrc files within project root directories as seen in references/nvmrc-and-defaults.md.
  • Boundary markers: No explicit markers are defined in the instructions; the skill relies on nvm's internal file parsing.
  • Capability inventory: Environment switching and command execution capabilities are present via nvm use, nvm run, and nvm exec.
  • Sanitization: Relies on the underlying nvm utility to validate and sanitize version strings from external files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — nvm