nix-setup
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install Nix using a remote script execution pattern:
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh. This script is provided by Determinate Systems, a well-recognized service provider in the Nix community. - [EXTERNAL_DOWNLOADS]: Several external resources are referenced and fetched for environment setup:
- Nix binaries are retrieved from the official
nixos.orgrepository within theassets/setup_nix.shinstaller. - The Agent Package Manager (
apm) is fetched from Microsoft's public GitHub releases inassets/apm.nix. - Various language-specific overlays and dependencies are sourced from established GitHub organizations such as
nix-community,oxalica,numtide, andmoonbit-community. - The OxCaml compiler source is pinned to the official GitHub repository
github.com/oxcaml/oxcamlinassets/oxcaml/flake.nix. - [COMMAND_EXECUTION]: The
assets/setup_nix.shscript executes shell commands to perform system-level configuration, such as creating directory structures in/nixand writing configuration files to/etc/nix/nix.conf. These operations are required for bootstrapping the Nix package manager in environments without a pre-existing installation.
Audit Metadata