fw-setup
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads FDK tarballs from the official vendor CDN at 'https://cdn.freshdev.io/fdk/'. These are trusted resources provided by Freshworks for developer tooling.
- [REMOTE_CODE_EXECUTION]: The skill automates the installation of 'nvm' by downloading and executing the official install script from the well-known 'nvm-sh' repository on GitHub. This is a standard and accepted method for configuring Node.js version management.
- [COMMAND_EXECUTION]: The skill performs necessary system modifications, such as updating shell configuration files (~/.zshrc, ~/.bashrc) and managing global npm packages. These actions are strictly limited to the stated purpose of setting up the FDK environment.
- [CREDENTIALS_UNSAFE]: The skill provides instructions for configuring an MCP server for marketplace publishing. It correctly advises users to manage API keys through secure local configuration files or IDE settings rather than sharing them in the chat context.
- [DATA_EXFILTRATION]: No suspicious data transfer patterns were detected. Network activity is confined to fetching official binaries and scripts from established vendor and community repositories.
Audit Metadata