nodejs-version-setup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local configuration files that could be attacker-controlled, such as when the agent is used to analyze an external or untrusted repository.
- Ingestion points: The skill reads
.nvmrc,.node-version, andpackage.json(engines.node field). - Boundary markers: No delimiters or warnings are specified to treat the content of these files as untrusted.
- Capability inventory: The skill uses the extracted data to execute shell commands via
nvm,fnm,asdf, orvolta. - Sanitization: There are no instructions to sanitize or validate the version strings before passing them to shell commands.
- [COMMAND_EXECUTION]: The skill routinely executes shell commands to install and switch Node.js versions. While these are standard developer workflows, they are triggered automatically based on the content of files found in the workspace.
Audit Metadata