nixos

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides an install.sh script and installation instructions in README.md that utilize git clone and curl | bash from the author's GitHub repository. This is a standard deployment mechanism for the skill and its updates.
  • [EXTERNAL_DOWNLOADS]: The scripts/generate-references.sh script is designed to fetch and synchronize documentation from well-known official NixOS GitHub repositories. This is consistent with the skill's primary purpose of providing up-to-date documentation.
  • [SAFE]: Static analysis flagged environment variable manipulation patterns in references/nix-pills.md. This is a false positive as the content is part of a pedagogical tutorial series ('Nix Pills') and the shell commands are located within markdown code blocks intended for user education, not for automated execution by the skill.
  • [SAFE]: The 'Live Fetching' section in SKILL.md provides URLs for the agent to retrieve more detailed documentation. These URLs point exclusively to the official NixOS GitHub infrastructure, which is a trusted source for technical documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 01:55 PM
Security Audit — agent-trust-hub — nixos