fw-setup

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the nvm (Node Version Manager) installation script from its official GitHub repository and downloads FDK CLI tarballs from the Freshworks Content Delivery Network (CDN) at cdn.freshdev.io.- [REMOTE_CODE_EXECUTION]: The skill executes the downloaded nvm installation script and uses npm install -g to install the FDK CLI from remote tarballs hosted on the vendor's CDN.- [COMMAND_EXECUTION]: The skill performs numerous shell operations to manage environment variables, verify installations, and modify shell configuration files (such as .zshrc and .bashrc). It also includes troubleshooting procedures that may use sudo to resolve permission issues or install system-level dependencies.- [CREDENTIALS_UNSAFE]: The skill provides instructions for configuring a Developer API Key (JWT) for use with an MCP server. It explicitly directs the user to store the credential in a local configuration file or via IDE settings rather than sharing it in the chat interface.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 08:52 AM
Security Audit — agent-trust-hub — fw-setup