dev-machine-setup
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external scripts and repositories for installation purposes from well-known sources, including Anthropic's Claude Code (claude.ai), Homebrew (GitHub), NodeSource (deb.nodesource.com), Astral (astral.sh), Oh My Zsh (GitHub), and Starship (starship.rs).
- [REMOTE_CODE_EXECUTION]: The setup procedure involves downloading and piping remote scripts to a shell (e.g.,
curl | bashorirm | iex). The instructions mandate that these commands be presented to the user for explicit confirmation before execution. - [COMMAND_EXECUTION]: The skill executes local environment discovery using a Python script (
scripts/detect_env.py) that runs shell commands to check tool versions. It also performs system-level modifications such as changing the login shell (chsh) and modifying shell configuration files (.zshrc,.zprofile). - [SAFE]: The skill implements a robust approval protocol that distinguishes between additive and mutating changes, ensures user oversight, and performs automated backups of all modified configuration files.
Audit Metadata