nvm
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for nvm and fnm which fetch scripts from the official nvm-sh repository and Vercel's hosting infrastructure.
- [COMMAND_EXECUTION]: Instructions detail the use of standard nvm commands for environment management, including version installation, aliasing, and executing subprocesses with specific Node.js versions.
- [PERSISTENCE]: Documents standard shell profile integration (e.g., modifying .bashrc or .zshrc) required to maintain the nvm environment across shell sessions.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the use of project-specific
.nvmrcfiles to control the Node.js environment. - Ingestion points: Reads version strings from
.nvmrcfiles within project root directories as seen inreferences/nvmrc-and-defaults.md. - Boundary markers: No explicit markers are defined in the instructions; the skill relies on nvm's internal file parsing.
- Capability inventory: Environment switching and command execution capabilities are present via
nvm use,nvm run, andnvm exec. - Sanitization: Relies on the underlying nvm utility to validate and sanitize version strings from external files.
Audit Metadata