nvm-defaults-and-nvmrc
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell configuration snippets for Bash, Zsh, and Fish that automate version switching. These scripts utilize shell hooks or command aliasing (e.g., aliasing
cdin Bash) to executenvm useornvm installautomatically when the user changes directories. - [EXTERNAL_DOWNLOADS]: The automation logic includes instructions to run
nvm installwhen a required Node.js version specified in a.nvmrcfile is missing. This triggers the download of Node.js binaries from official distribution servers, which is the expected and primary purpose of the Node Version Manager. - [SAFE]: All provided code samples are well-documented patterns sourced from the official
nvm-sh/nvmrepository on GitHub, following standard community practices for environment management.
Audit Metadata