nix-install

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads installer scripts from official and well-known sources.
  • Fetches the Nix installer from the NixOS Foundation's official domain (nixos.org).
  • Fetches the Determinate Nix Installer from determinate.systems, a recognized provider in the Nix ecosystem.
  • [REMOTE_CODE_EXECUTION]: Downloaded scripts are executed directly in the shell to automate the installation process.
  • Uses process substitution to run the upstream installer from nixos.org.
  • Pipes curl output to sh to run the installer from determinate.systems.
  • [COMMAND_EXECUTION]: The skill executes various system commands for environment discovery and setup.
  • Detects platform and OS version using uname and grep /proc/version.
  • Installs system prerequisites using native package managers like apt-get, dnf, pacman, apk, and zypper.
  • Manages the Nix daemon using systemctl on Linux and launchctl on macOS.
  • [PRIVILEGE_ESCALATION]: Administrative privileges are requested to perform standard system-level installation tasks.
  • Uses sudo to create and manage the /nix directory, build users, and groups.
  • Uses sudo to configure system-wide profile scripts and restart the nix-daemon service.
  • These actions are necessary for the skill's primary purpose and are clearly documented in the compatibility section.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 05:38 AM
Security Audit — agent-trust-hub — nix-install