fw-setup

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill automates the installation and upgrading of the Freshworks Development Kit (FDK) by downloading and installing tarballs directly from the vendor's official CDN at cdn.freshdev.io. This is the standard distribution method for the tool.
  • [REMOTE_CODE_EXECUTION]: During troubleshooting or fresh setups, the skill fetches and executes the official installation scripts for nvm (Node Version Manager) from the nvm-sh organization on GitHub (raw.githubusercontent.com/nvm-sh/nvm). This is a well-known and trusted source for this utility.
  • [COMMAND_EXECUTION]: The skill includes functionality to modify shell initialization files (such as .zshrc, .bashrc, and Windows PowerShell profiles) to ensure persistence of the development environment. These modifications are guarded by automated backups and focus on appending necessary environment variables and loading scripts.
  • [COMMAND_EXECUTION]: The troubleshooting commands include standard process management tasks, such as terminating local Node.js processes using pkill or taskkill to resolve port conflicts when running local development servers.
  • [COMMAND_EXECUTION]: The skill may suggest using sudo for permission fixes (e.g., sudo chown) in scenarios where global npm directories have incorrect ownership, which is a standard administrative task for resolving environment issues.
  • [CREDENTIALS_SAFE]: The skill provides instructions for configuring an MCP (Model Context Protocol) server for publishing. It specifically instructs the agent to ask the user for a token and write it directly to local configuration files rather than displaying it in the chat, following secure credential handling practices.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 10:55 AM