010102-install-toolchain

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation scripts for widely used development tools from their official sources.
  • references/setup-guide.md contains the official installation command for nvm: curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash.
  • references/setup-guide.md contains the official installation command for the Bun runtime: curl -fsSL https://bun.sh/install | bash.
  • [COMMAND_EXECUTION]: The skill includes a Python script for verifying the environment setup through safe command execution.
  • scripts/validate.py uses subprocess.run with a list of arguments (e.g., ['node', '--version']) to check if tools are installed and capture their versions.
  • SKILL.md and references/setup-guide.md provide standard shell commands for package management and environment configuration (e.g., npm install -g pnpm, pnpm setup).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 12:19 PM
Security Audit — agent-trust-hub — 010102-install-toolchain