building
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill provides instructions for using the
nixCLI to build and evaluate configurations. These commands are standard for NixOS development and are restricted to the local directory context (using.or$PWD). - [REMOTE_CODE_EXECUTION] (SAFE): No patterns for executing untrusted remote code or scripts (e.g., piping
curltobash) were identified. While Nix commands download dependencies, they do so based on the definitions in the local flake files. - [DATA_EXFILTRATION] (SAFE): There are no identified patterns involving unauthorized network requests, hardcoded credentials, or access to sensitive system files like SSH keys or AWS credentials.
Audit Metadata