skills/skynight137/skills/replit-nix/Gen Agent Trust Hub

replit-nix

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs standard Nix environment commands, including nix-env for package installation and nix path-info for dependency tree resolution. These commands are essential for configuring Replit workspaces and resolving system library paths.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of system libraries from the Nix package repository (nixpkgs) to populate the /nix/store. These are well-known and standard resources for managing dependencies on the target platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill outlines a method for ingesting package closure information to construct environment variables, creating a theoretical surface for indirect prompt injection if source package metadata were manipulated.
  • Ingestion points: Processes output from nix eval and nix path-info as described in SKILL.md.
  • Boundary markers: Absent; results from system commands are processed directly into path strings.
  • Capability inventory: Includes shell execution for installation, file path generation, and environment exports.
  • Sanitization: Absent; the process relies on the inherent structure and integrity of the Nix package manager's output.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 02:47 AM
Security Audit — agent-trust-hub — replit-nix