nvm-install
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute the nvm installation script directly via the shell using curl or wget piped to bash.
- Evidence:
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bashinexamples/install-update-script.mdandexamples/alpine-install.md. - [EXTERNAL_DOWNLOADS]: Fetches scripts and clones source code from the official nvm-sh GitHub repository.
- Evidence:
git clone https://github.com/nvm-sh/nvm.git .nvminexamples/git-install.md. - [COMMAND_EXECUTION]: Includes instructions for running package manager commands and git operations to set up the environment.
- Evidence:
apk add -U ...commands inexamples/alpine-install.mdto install build dependencies. - [PERSISTENCE]: Guides the user to modify shell profile configuration files (like ~/.bashrc or ~/.zshrc) to initialize the tool in future sessions.
- Evidence: Instructions in
examples/installation.mdfor adding environment variables and sourcing scripts in profile files.
Audit Metadata