chezmoi
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The bootstrap and installation recipes fetch and execute scripts from well-known and official project sources, including
get.chezmoi.io,raw.githubusercontent.com/Homebrew/install(Homebrew), andsh.rustup.rs(Rustup). - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to invoke thechezmoiCLI, which executes local scripts (prefixed withrun_) and enables shell command execution within templates via theoutputfunction. These operations are core to the tool's functionality, and the documentation consistently instructs the user to review changes usingdiffanddry-runmodes before applying them. - [SAFE]: The instructions promote secure data handling, specifically advising against committing plaintext secrets and recommending the use of professional secret management tools like 1Password, Bitwarden, and
ageencryption.
Audit Metadata