node-version-discipline
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates shell commands to source version managers (e.g., nvm) and switch Node.js versions locally. These operations are restricted to the local environment and are standard for project toolchain management.\n- [DATA_EXFILTRATION]: The skill probes the local file system for version declaration files such as
.nvmrc,.node-version, andpackage.json. No evidence of network activity or data exfiltration was found.\n- [SAFE]: The script uses regular expressions to strictly validate version strings extracted from local files before using them in shell commands, which prevents command injection from potentially malicious project files.\n- [SAFE]: Persistence of configuration files is implemented as a user-confirmed action, ensuring the agent does not make unauthorized modifications to the project structure.
Audit Metadata