Devenv Ecosystem
Pass
Audited by Gen Agent Trust Hub on May 31, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill interacts with devenv.nix configuration files which can include shell commands in fields such as scripts, tasks, processes, and enterShell. This creates an indirect prompt injection surface where malicious instructions could be embedded in a project repository.\n
- Ingestion points: Project configuration files (devenv.nix).\n
- Boundary markers: The skill does not define boundary markers to isolate configuration data from instructions.\n
- Capability inventory: The skill leverages tools that execute these shell commands, granting the agent shell access within the devenv environment.\n
- Sanitization: No sanitization or validation of configuration strings is performed.\n- [EXTERNAL_DOWNLOADS]: The skill manages the download of tools and libraries from the Nix ecosystem and official language registries like npm and PyPI.\n- [COMMAND_EXECUTION]: The skill facilitates the definition and execution of arbitrary shell scripts and background processes as a core part of its development environment management functionality.
Audit Metadata