chezmoi-workflows
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to fetch the official 'chezmoi' installation script from
get.chezmoi.io. - [REMOTE_CODE_EXECUTION]: The installation process involves piping a remote script to a shell (
curl | sh). This is the standard, documented method for installing 'chezmoi' from its official domain. - [COMMAND_EXECUTION]: The skill uses
chezmoi,git, andghCLI tools to perform system configuration tasks, such as tracking files, managing templates, and interacting with GitHub repositories. - [SAFE]: The skill encourages security best practices, such as using private repositories for dotfiles and integrating with password managers (e.g., 1Password) to handle credentials via templates rather than hardcoding them in files.
Audit Metadata