install-node-stack
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill incorporates explicit security warnings, such as forbidding the piping of remote downloads directly into the shell and cautioning against blind shell profile modifications.
- [SAFE]: Instructions prioritize user oversight, directing the agent to explain the toolchain and wait for confirmation before executing any installation commands.
- [SAFE]: The skill promotes proper credential hygiene by instructing the user to keep npm registry tokens in controlled storage and avoid committing secrets to project files like
.npmrc. - [SAFE]: Tooling references (Homebrew, nvm, pnpm, Bun, Expo) target well-known and reputable software ecosystems. The use of a specific version for
expo-doctor@1.20.4demonstrates a commitment to reproducible and verifiable environments.
Audit Metadata