skills/mizchi/skills/nix-setup/Gen Agent Trust Hub

nix-setup

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to install Nix using a remote script execution pattern: curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh. This script is provided by Determinate Systems, a well-recognized service provider in the Nix community.
  • [EXTERNAL_DOWNLOADS]: Several external resources are referenced and fetched for environment setup:
  • Nix binaries are retrieved from the official nixos.org repository within the assets/setup_nix.sh installer.
  • The Agent Package Manager (apm) is fetched from Microsoft's public GitHub releases in assets/apm.nix.
  • Various language-specific overlays and dependencies are sourced from established GitHub organizations such as nix-community, oxalica, numtide, and moonbit-community.
  • The OxCaml compiler source is pinned to the official GitHub repository github.com/oxcaml/oxcaml in assets/oxcaml/flake.nix.
  • [COMMAND_EXECUTION]: The assets/setup_nix.sh script executes shell commands to perform system-level configuration, such as creating directory structures in /nix and writing configuration files to /etc/nix/nix.conf. These operations are required for bootstrapping the Nix package manager in environments without a pre-existing installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 03:45 AM