node-red
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sudofor system tasks such as managing the Node-RED service viasystemctl, adjusting firewall settings withufworfirewall-cmd, and modifying user groups withusermod. These operations are consistent with the skill's administrative purpose. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
node-redpackage and additional nodes usingnpm. These downloads originate from the official npm registry, which is a well-known and expected source. - [SAFE]: The skill includes specific advice for securing the Node-RED installation, such as generating bcrypt hashes for authentication and setting a strong credential secret for encryption.
- [SAFE]: No hardcoded credentials or malicious patterns were detected; all configuration examples use non-functional placeholders.
Audit Metadata