nix-shell
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
nix shellandnix run. This allows the agent to provision and use tools that are not currently installed in the system PATH. - [EXTERNAL_DOWNLOADS]: When a package is not cached locally, the skill describes how Nix will automatically download the necessary binaries from the official NixOS binary cache at
https://cache.nixos.org. This is standard behavior for the Nix package manager.
Audit Metadata