chezmoi-sync
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Executes
chezmoiandgitcommands through a Python wrapper to manage dotfile state and versioning. - [EXTERNAL_DOWNLOADS]: Retrieves updates from the user's configured remote Git repository using
git fetchandgit pullcommands. - [DATA_EXFILTRATION]: Synchronizes local configurations to a remote Git repository via
git push. This is the primary intended function of the skill targeting the user's infrastructure. - [SAFE]: The skill defines an explicit security model in
SKILL.mdthat prevents the automatic execution of 'dangerous' operations (such aschezmoi apply) that overwrite local files without human confirmation.
Audit Metadata