chezmoi-management

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions for initializing a new machine that involve downloading and executing a remote script: curl -fsSL https://install.determinate.systems/nix | sh -s -- install. This is a standard installation method for the Nix package manager provided by Determinate Systems, a well-known entity in the Nix ecosystem.
  • [COMMAND_EXECUTION]: The skill documents various shell commands for managing dotfiles, including chezmoi apply, nix run, and pkf hooks install. These commands are integral to the skill's purpose of dotfile and system configuration management.
  • [SAFE]: The skill includes instructions to set up secretlint via pkfire to scan outgoing git diffs for sensitive information like API keys or tokens. This is a proactive security measure designed to prevent data exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 09:53 PM