nvm-global-packages

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute nvm shell commands to manage Node.js versions and global packages. This involves using the --reinstall-packages-from flag, which is a standard feature for environment migration.
  • [EXTERNAL_DOWNLOADS]: The skill references the official nvm-sh/nvm GitHub repository for documentation on migrating global packages and using the default-packages file. These are well-known resources for Node.js environment management.
  • [SAFE]: The skill follows best practices by advising the user to call out risks of conflicting global packages and ensuring that sensitive information is not hardcoded in environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:19 PM
Security Audit — agent-trust-hub — nvm-global-packages