nvm-shell-integration

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PERSISTENCE]: The skill provides scripts intended to be added to shell profile files (~/.bashrc, ~/.config/fish/config.fish, ~/.zshrc).
  • Evidence: examples/auto-use-bash.md, examples/auto-use-fish.md, and examples/auto-use-zsh.md contain functions and hooks that execute every time a shell session starts or a directory is changed.
  • [INDIRECT_PROMPT_INJECTION]: The provided scripts ingest data from .nvmrc files found in the user's filesystem, which serves as an untrusted input surface.
  • Ingestion points: The scripts read .nvmrc content using $(<.../.nvmrc), cat, or $(cat ...) in examples/auto-use-bash.md, examples/auto-use-fish.md, and examples/auto-use-zsh.md.
  • Boundary markers: None present; the scripts directly use the file content as arguments for nvm commands.
  • Capability inventory: The skill uses nvm install and nvm use, which can execute downloads and modify the environment.
  • Sanitization: The scripts use standard shell quoting for variables (e.g., "${nvm_version}") which mitigates basic word splitting but passes the full file content to the nvm binary.
  • [COMMAND_EXECUTION]: The skill relies on shell functions and aliases to intercept the cd command and execute nvm logic.
  • Evidence: examples/auto-use-bash.md defines a cdnvm function and aliases it to cd. examples/auto-use-zsh.md uses add-zsh-hook chpwd to trigger logic on directory changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 01:34 PM