nix-hash
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation for using standard Nix ecosystem utilities such as
nix hash,nix-prefetch-url, andnix-prefetch-github. These tools are intended for computing hashes and fetching source code for reproducible package builds. - [INDIRECT_PROMPT_INJECTION]: The skill includes placeholders for external data such as repository URLs and hash strings. Although these are ingestion points for untrusted data, the skill does not instruct the agent to disregard safety protocols or process the data in an unsafe manner.
- Ingestion points: Placeholders for
<url>,<owner>,<repo>, and<hash>inSKILL.md. - Boundary markers: None.
- Capability inventory: Execution of standard Nix CLI utilities via shell.
- Sanitization: None.
Audit Metadata