skills/mizchi/skills/nix-setup/Gen Agent Trust Hub

nix-setup

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads installation scripts and binaries from several external services. These include the official NixOS release servers (releases.nixos.org), the Devbox installer from Jetify (jetify.com), and the Agent Package Manager from Microsoft's GitHub repository. All identified sources are recognized as well-known technology providers or trusted organizations.
  • [REMOTE_CODE_EXECUTION]: Instructions are provided to install tools by piping remote scripts directly into the shell (e.g., curl | bash). While this pattern is generally high-risk, in this context, it targets established, reputable developer tools (Nix and Devbox) and follows their official installation procedures.
  • [COMMAND_EXECUTION]: The skill includes a bootstrap script (assets/setup_nix.sh) designed for sandboxed environments. This script performs system configuration tasks such as modifying /etc/nix/nix.conf and setting up environment variables in /etc/profile.d/nix.sh. Additionally, various language templates utilize Nix shellHook definitions to automate project-specific initializations like opam init or moon update.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 03:53 AM