nix-expert
Expert guidance on Nix, NixOS, home-manager, flakes, and Nix packaging. Use when writing or debugging Nix expressions, configuring NixOS or home-manager, authoring derivations, managing flake inputs, encrypting secrets with agenix or sops-nix, or hardening a NixOS host. Triggers on Nix, NixOS, nixpkgs, home-manager, flake.nix, nixos-rebuild, nix build, nix develop, devShell, derivation, overlay, agenix, and on Nix errors such as hash mismatches, infinite recursion, or evaluation failures. Advisory rather than generative: it explains, reviews, and debugs. If the repository provides its own skill for authoring host configurations, prefer that for writing config.
72
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Medium
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
This skill explicitly instructs the agent to author/change host .nix files and to run nixos-rebuild (including switch/test on remote hosts) and to modify service/SSH settings — actions that change system state and typically require privileged operations — although it does not tell the agent to escalate or bypass privileges or to create new users.
- Repository
- rikdc/ai-skills
- Commit
a43676e
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.