codeguard-nix
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
bash -cwithfindandxargsto run linter commands on Nix files. It uses appropriate flags like-print0and-0to handle file paths containing special characters safely. - [DYNAMIC_EXECUTION]: The skill dynamically generates commands by substituting
{file}placeholders with specific file paths for localized formatting tasks. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes local project files. Evidence chain: Ingestion points are
.nixfiles; Capabilities include shell execution of linting/formatting tools; Sanitization involves replacing placeholders with validated paths; Boundary markers are not explicitly implemented. The risk is considered low due to the narrow scope of the tools used.
Audit Metadata