devcontainers-nix
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references container images and configuration features from official registries managed by Microsoft (mcr.microsoft.com) and GitHub (ghcr.io), and fetches tool versions from official Kubernetes (dl.k8s.io) and Nix channels. These are recognized as trusted infrastructure sources.
- [REMOTE_CODE_EXECUTION]: The instructions include official installation procedures for OpenTofu and Devbox that download and execute shell scripts from their respective official domains (opentofu.org and jetify.com). These commands follow the standard, documented setup methods for these widely-used tools.
- [INDIRECT_PROMPT_INJECTION]: The skill defines templates for configuration files such as devcontainer.json and devbox.json. While an agent dynamically generating these files from untrusted input could be vulnerable to instruction injection, the static templates provided here are benign and follow development best practices.
- Ingestion points: Configuration templates in SKILL.md for dev containers, Nix flakes, and Devbox environments.
- Boundary markers: None explicitly present in the example templates.
- Capability inventory: Provides capability for system-level tool installation, package management (npm), and shell script execution.
- Sanitization: Relies on standard tool-specific validation for JSON and Nix configurations.
Audit Metadata