nix-install
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installer scripts from official and well-known sources.
- Fetches the Nix installer from the NixOS Foundation's official domain (nixos.org).
- Fetches the Determinate Nix Installer from determinate.systems, a recognized provider in the Nix ecosystem.
- [REMOTE_CODE_EXECUTION]: Downloaded scripts are executed directly in the shell to automate the installation process.
- Uses process substitution to run the upstream installer from nixos.org.
- Pipes curl output to sh to run the installer from determinate.systems.
- [COMMAND_EXECUTION]: The skill executes various system commands for environment discovery and setup.
- Detects platform and OS version using uname and grep /proc/version.
- Installs system prerequisites using native package managers like apt-get, dnf, pacman, apk, and zypper.
- Manages the Nix daemon using systemctl on Linux and launchctl on macOS.
- [PRIVILEGE_ESCALATION]: Administrative privileges are requested to perform standard system-level installation tasks.
- Uses sudo to create and manage the /nix directory, build users, and groups.
- Uses sudo to configure system-wide profile scripts and restart the nix-daemon service.
- These actions are necessary for the skill's primary purpose and are clearly documented in the compatibility section.
Audit Metadata