chezmoi-workflows
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The setup instructions in
references/setup.mdfacilitate the installation of chezmoi using the commandsh -c "$(curl -fsLS get.chezmoi.io)". This is the official and standard installation method for this well-known open-source utility. - [EXTERNAL_DOWNLOADS]: The skill performs downloads from
get.chezmoi.iofor installation and interacts with GitHub repositories viagitand theghCLI for synchronizing dotfiles. - [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to manage local configuration files, execute chezmoi commands, and perform Git operations. - [SAFE]: The skill incorporates security best practices by configuring chezmoi to fail if secrets are detected (
secrets = "error") and providing detailed instructions on using external secret managers like 1Password and environment variables to avoid data exposure.
Audit Metadata