nix-setup
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation includes commands to download and execute installers for Devbox and the Nix package manager. The Devbox installer is fetched from
https://get.jetify.com/devboxand piped to bash. The Nix installer is fetched fromhttps://install.determinate.systems/nixand piped to sh. These are recognized official installation methods from well-known technology providers. - [EXTERNAL_DOWNLOADS]: The
assets/setup_nix.shscript downloads Nix binary tarballs fromhttps://releases.nixos.org, the official release site for the Nix project. - [EXTERNAL_DOWNLOADS]: The
assets/apm.nixfile defines a Nix derivation that fetches binary releases of the Agent Package Manager from Microsoft's official GitHub repository. - [COMMAND_EXECUTION]: The
assets/setup_nix.shscript executes shell commands to configure the system environment, including creating directories in/etc/nixand/nix/store, and writing configuration files. These operations are standard for software installation and environment bootstrapping. - [COMMAND_EXECUTION]: The provided Nix templates (
flake.nix) useshellHookto perform environment setup tasks such as initializingpnpm,uv, oropamproject-local directories. These actions are transparently documented and align with development environment best practices.
Audit Metadata