setup-node
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts from the author's GitHub repository (
github.com/Melvynx) and official Node.js binaries fromnodejs.org. It also references the official Homebrew installation script fromgithub.com/Homebrew. - [COMMAND_EXECUTION]: The skill executes local shell scripts and system package managers like
winget(Windows) andbrew(macOS) to install software. It usescurlto retrieve version metadata and package archives. - [PERSISTENCE]: The
install-node.shscript includes apersistfunction that modifies user shell configuration files (.bashrc,.zshrc,.bash_profile,.zprofile). This is used to ensure that thePATHand environment variables for Homebrew and Node.js remain available in future sessions, which is standard behavior for development environment setup tools.
Audit Metadata