devcontainers-nix
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes installation scripts for OpenTofu and Devbox from official vendor domains (get.opentofu.org and get.jetify.com) to configure the local environment.
- [DYNAMIC_EXECUTION]: Employs the eval command within shell configurations to dynamically initialize environment settings via direnv integration.
- [EXTERNAL_DOWNLOADS]: Downloads the kubectl binary from the official Kubernetes release server (dl.k8s.io).
- [INDIRECT_PROMPT_INJECTION]: The skill supports the use of configuration files (flake.nix, devbox.json) that can include shell hooks and custom scripts, creating a surface for indirect instruction execution if these files are obtained from untrusted repositories. * Ingestion points: flake.nix, devbox.json, .envrc * Boundary markers: None explicitly defined in examples. * Capability inventory: Shell command execution via shellHook and init_hook. * Sanitization: None; relies on user verification of the configuration files.
- [COMMAND_EXECUTION]: Provides various examples of CLI commands for environment management, including nix develop, devbox run, and kubectl operations.
Audit Metadata