chezmoi-management
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use
chezmoifor system-level configuration management. This includes modifying shell profiles (~/.zshrc), application settings (~/.config/), and agent-specific directories (~/.claude/). - [EXTERNAL_DOWNLOADS]: Instructions include fetching personal dotfile configurations from the author's GitHub repository (
github.com/mizchi/chezmoi-dotfiles.git) and installing development tools likeprek. - [REMOTE_CODE_EXECUTION]: The workflow utilizes
chezmoilifecycle hooks, such asrun_after_apm-install.sh, which execute shell scripts and install external agent skills globally viaapm(Agent Package Manager) during the configuration application phase. - [CREDENTIALS_SAFE]: The skill promotes security best practices by documenting the integration of
secretlintinto the pre-commit workflow to detect and block the accidental commitment of API keys or sensitive tokens.
Audit Metadata