dotfile-systems-architect
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation scripts for reputable third-party tools to facilitate environment setup.
- Fetches the Chezmoi installation script from
get.chezmoi.io(the official domain for the well-known Chezmoi dotfile manager). - Fetches the Oh-My-Zsh installation script from its official repository on GitHub.
- [REMOTE_CODE_EXECUTION]: Contains commands that pipe remote scripts to a shell for installation purposes.
- Includes
sh -c "$(curl -fsLS get.chezmoi.io)"for installing the Chezmoi utility. - Includes
sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"for installing the Oh-My-Zsh framework. - [DATA_EXFILTRATION]: While the skill manages paths to sensitive configuration files, it prioritizes local security and prevents accidental leakage.
- Provides strategies for relocating security-critical directories like
~/.ssh,~/.aws,~/.kube, and~/.gnupgto standardized XDG locations. - Includes a dedicated reference (
references/secrets-management.md) that explicitly warns against committing unencrypted secrets and provides scripts for auditing repositories for leaked credentials (e.g., searching for private keys, OpenAI keys, or AWS access keys). - [COMMAND_EXECUTION]: Uses standard shell operations to automate the migration and configuration process.
- Employs
ln -s,mv, andmkdirto organize files according to the XDG specification. - Uses Git aliases to manage the user's home directory as a bare repository, enabling selective file tracking.
Audit Metadata