setup-node

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts from the author's GitHub repository (github.com/Melvynx) and official Node.js binaries from nodejs.org. It also references the official Homebrew installation script from github.com/Homebrew.
  • [COMMAND_EXECUTION]: The skill executes local shell scripts and system package managers like winget (Windows) and brew (macOS) to install software. It uses curl to retrieve version metadata and package archives.
  • [PERSISTENCE]: The install-node.sh script includes a persist function that modifies user shell configuration files (.bashrc, .zshrc, .bash_profile, .zprofile). This is used to ensure that the PATH and environment variables for Homebrew and Node.js remain available in future sessions, which is standard behavior for development environment setup tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:00 AM