codeguard-nix

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs bash -c with find and xargs to run linter commands on Nix files. It uses appropriate flags like -print0 and -0 to handle file paths containing special characters safely.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates commands by substituting {file} placeholders with specific file paths for localized formatting tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes local project files. Evidence chain: Ingestion points are .nix files; Capabilities include shell execution of linting/formatting tools; Sanitization involves replacing placeholders with validated paths; Boundary markers are not explicitly implemented. The risk is considered low due to the narrow scope of the tools used.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:47 AM