nvm-shell-integration

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides shell functions and aliases (e.g., cdnvm, load-nvmrc) designed to be added to shell configuration files (~/.bashrc, ~/.zshrc, etc.). These functions execute standard nvm commands such as nvm use and nvm install based on the content of .nvmrc files found in the directory hierarchy. This behavior is the intended primary purpose of the skill.
  • [DATA_INGESTION]: The shell hooks automatically read .nvmrc files when changing directories. While this processes external data (the file content), it is restricted to the specific filename used by nvm for version management. No network transmission of this data occurs.
  • [EXTERNAL_DOWNLOADS]: The skill mentions and facilitates the use of nvm install, which downloads Node.js binaries from official mirrors. These references point to the official nvm-sh/nvm repository on GitHub, which is a well-known and trusted source for environment management tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 10:53 AM