better-chezmoi
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/probe_chezmoi.pyuses thesubprocessmodule to interact with thechezmoibinary. This functionality is used to verify the supported command-line interface (CLI) surface and ensure compatibility with the installed version. The execution is performed within isolated temporary directories to prevent accidental modification of the user's actual dotfiles during testing. - [EXTERNAL_DOWNLOADS]: The script
scripts/official_docs.pyperforms network requests tohttps://www.chezmoi.io/to fetch and update the bundled documentation snapshot. These downloads are restricted to the official project domain and are used to provide the agent with current reference material. - [COMMAND_EXECUTION]: The core instructions in
SKILL.mddirect the agent to execute variouschezmoicommands for dotfile management. The workflow is designed with multiple safety gates, requiring the use of--dry-run,diff, andverifycommands to preview and validate changes before they are applied to the system. - [SAFE]: The skill implements an Indirect Prompt Injection surface by ingesting external content via documentation scraping. This risk is mitigated by explicit instructions requiring the agent to prioritize the output of the locally installed binary's help commands over the scraped documentation. The scraper also sanitizes content by removing script and style elements.
Audit Metadata