replit-nix
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard Nix environment commands, including
nix-envfor package installation andnix path-infofor dependency tree resolution. These commands are essential for configuring Replit workspaces and resolving system library paths. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of system libraries from the Nix package repository (nixpkgs) to populate the
/nix/store. These are well-known and standard resources for managing dependencies on the target platform. - [INDIRECT_PROMPT_INJECTION]: The skill outlines a method for ingesting package closure information to construct environment variables, creating a theoretical surface for indirect prompt injection if source package metadata were manipulated.
- Ingestion points: Processes output from
nix evalandnix path-infoas described in SKILL.md. - Boundary markers: Absent; results from system commands are processed directly into path strings.
- Capability inventory: Includes shell execution for installation, file path generation, and environment exports.
- Sanitization: Absent; the process relies on the inherent structure and integrity of the Nix package manager's output.
Audit Metadata