chezmoi-workflows
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's workflows (e.g., "Sync from Remote" and "Initialize (clone existing)" in SKILL.md) instruct using chezmoi to pull from a GitHub remote (e.g.,
chezmoi init git@github.com:<user>/dotfiles.gitandchezmoi update) and then render/apply those repository templates into the home directory, which clearly ingests untrusted user-provided third-party content from GitHub that can change agent actions and system state.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill includes a setup/install command that fetches and executes remote code via sh -c "$(curl -fsLS get.chezmoi.io)" (https://get.chezmoi.io), which would run remote code during setup.
Audit Metadata