skills/mizchi/skills/nix-setup/Gen Agent Trust Hub

nix-setup

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill documentation includes commands to download and execute installers for Devbox and the Nix package manager. The Devbox installer is fetched from https://get.jetify.com/devbox and piped to bash. The Nix installer is fetched from https://install.determinate.systems/nix and piped to sh. These are recognized official installation methods from well-known technology providers.
  • [EXTERNAL_DOWNLOADS]: The assets/setup_nix.sh script downloads Nix binary tarballs from https://releases.nixos.org, the official release site for the Nix project.
  • [EXTERNAL_DOWNLOADS]: The assets/apm.nix file defines a Nix derivation that fetches binary releases of the Agent Package Manager from Microsoft's official GitHub repository.
  • [COMMAND_EXECUTION]: The assets/setup_nix.sh script executes shell commands to configure the system environment, including creating directories in /etc/nix and /nix/store, and writing configuration files. These operations are standard for software installation and environment bootstrapping.
  • [COMMAND_EXECUTION]: The provided Nix templates (flake.nix) use shellHook to perform environment setup tasks such as initializing pnpm, uv, or opam project-local directories. These actions are transparently documented and align with development environment best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:24 AM