skills/cnife/skills/chezmoi-sync/Gen Agent Trust Hub

chezmoi-sync

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Executes chezmoi and git commands through a Python wrapper to manage dotfile state and versioning.
  • [EXTERNAL_DOWNLOADS]: Retrieves updates from the user's configured remote Git repository using git fetch and git pull commands.
  • [DATA_EXFILTRATION]: Synchronizes local configurations to a remote Git repository via git push. This is the primary intended function of the skill targeting the user's infrastructure.
  • [SAFE]: The skill defines an explicit security model in SKILL.md that prevents the automatic execution of 'dangerous' operations (such as chezmoi apply) that overwrite local files without human confirmation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 09:52 AM
Security Audit — agent-trust-hub — chezmoi-sync