chezmoi-management
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions for initializing a new machine that involve downloading and executing a remote script:
curl -fsSL https://install.determinate.systems/nix | sh -s -- install. This is a standard installation method for the Nix package manager provided by Determinate Systems, a well-known entity in the Nix ecosystem. - [COMMAND_EXECUTION]: The skill documents various shell commands for managing dotfiles, including
chezmoi apply,nix run, andpkf hooks install. These commands are integral to the skill's purpose of dotfile and system configuration management. - [SAFE]: The skill includes instructions to set up
secretlintviapkfireto scan outgoing git diffs for sensitive information like API keys or tokens. This is a proactive security measure designed to prevent data exposure.
Audit Metadata