dotfile-systems-architect

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation scripts for reputable third-party tools to facilitate environment setup.
  • Fetches the Chezmoi installation script from get.chezmoi.io (the official domain for the well-known Chezmoi dotfile manager).
  • Fetches the Oh-My-Zsh installation script from its official repository on GitHub.
  • [REMOTE_CODE_EXECUTION]: Contains commands that pipe remote scripts to a shell for installation purposes.
  • Includes sh -c "$(curl -fsLS get.chezmoi.io)" for installing the Chezmoi utility.
  • Includes sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" for installing the Oh-My-Zsh framework.
  • [DATA_EXFILTRATION]: While the skill manages paths to sensitive configuration files, it prioritizes local security and prevents accidental leakage.
  • Provides strategies for relocating security-critical directories like ~/.ssh, ~/.aws, ~/.kube, and ~/.gnupg to standardized XDG locations.
  • Includes a dedicated reference (references/secrets-management.md) that explicitly warns against committing unencrypted secrets and provides scripts for auditing repositories for leaked credentials (e.g., searching for private keys, OpenAI keys, or AWS access keys).
  • [COMMAND_EXECUTION]: Uses standard shell operations to automate the migration and configuration process.
  • Employs ln -s, mv, and mkdir to organize files according to the XDG specification.
  • Uses Git aliases to manage the user's home directory as a bare repository, enabling selective file tracking.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 09:13 PM
Security Audit — agent-trust-hub — dotfile-systems-architect