nvm-install

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute the nvm installation script directly via the shell using curl or wget piped to bash.
  • Evidence: curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash in examples/install-update-script.md and examples/alpine-install.md.
  • [EXTERNAL_DOWNLOADS]: Fetches scripts and clones source code from the official nvm-sh GitHub repository.
  • Evidence: git clone https://github.com/nvm-sh/nvm.git .nvm in examples/git-install.md.
  • [COMMAND_EXECUTION]: Includes instructions for running package manager commands and git operations to set up the environment.
  • Evidence: apk add -U ... commands in examples/alpine-install.md to install build dependencies.
  • [PERSISTENCE]: Guides the user to modify shell profile configuration files (like ~/.bashrc or ~/.zshrc) to initialize the tool in future sessions.
  • Evidence: Instructions in examples/installation.md for adding environment variables and sourcing scripts in profile files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 01:34 PM