nixos
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an
install.shscript and installation instructions inREADME.mdthat utilizegit cloneandcurl | bashfrom the author's GitHub repository. This is a standard deployment mechanism for the skill and its updates. - [EXTERNAL_DOWNLOADS]: The
scripts/generate-references.shscript is designed to fetch and synchronize documentation from well-known official NixOS GitHub repositories. This is consistent with the skill's primary purpose of providing up-to-date documentation. - [SAFE]: Static analysis flagged environment variable manipulation patterns in
references/nix-pills.md. This is a false positive as the content is part of a pedagogical tutorial series ('Nix Pills') and the shell commands are located within markdown code blocks intended for user education, not for automated execution by the skill. - [SAFE]: The 'Live Fetching' section in
SKILL.mdprovides URLs for the agent to retrieve more detailed documentation. These URLs point exclusively to the official NixOS GitHub infrastructure, which is a trusted source for technical documentation.
Audit Metadata