Borrowing it
Nothing to install: this file belongs to AmineDjeghri/personal-os-setup. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/AmineDjeghri/personal-os-setup/main/.claude/skills/chezmoi-scripts/SKILL.mdgit clone --depth 1 https://github.com/AmineDjeghri/personal-os-setupWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/aminedjeghri/personal-os-setup/chezmoi-scripts)<a href="https://agentmods.dev/skills/aminedjeghri/personal-os-setup/chezmoi-scripts"><img src="https://agentmods.dev/badge/skills/aminedjeghri/personal-os-setup/chezmoi-scripts/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/aminedjeghri/personal-os-setup/chezmoi-scripts"><img src="https://agentmods.dev/badge/skills/aminedjeghri/personal-os-setup/chezmoi-scripts.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 20 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Privilege Escalation · line 62 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00109 | $0.02105 |
| Opus 5.5 | $0.00044 | $0.00842 |
| Sonnet 5.5 | $0.00022 | $0.00421 |
| Haiku 4.5 | $0.00011 | $0.00211 |
Grade B, and why
chezmoi-scripts scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
Building (`hyprpm add <repo>`) needs hyprpm's internal `sudo`, which works when run directly but **hangs when chezmoi invokes it** (stranded password prompt in the Logs tab, needing a manual kill). So the script never at How it starts
The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.
chezmoi script scoping in personal-os-setup
The core gotcha: a targeted chezmoi apply does not run sibling scripts
The "Sync dotfiles" tab's apply selected/diff selected buttons never run a bare chezmoi apply — chezmoi_apply() in tasks/system/chezmoi.py always passes the selected paths as explicit targets: chezmoi apply --force --parent-dirs <target1> <target2> .... A run_/run_once_/run_onchange_ script only executes if its own managed path is in that target list — being in the same directory as a targeted file is not enough:
chezmoi apply <only .zshrc>→ noctalia/hypr untouched, scripts don't run.chezmoi apply <only noctalia/config.toml>(a sibling of the script in the same dir) → the script still does not run.chezmoi apply <the script's own managed path>→ script runs.
Reproduce it against a scratch source dir before relying on the behaviour:
mkdir -p /tmp/t/{home,src/dot_config/x} && cd /tmp/t
echo x > src/dot_config/x/file.txt
printf '#!/bin/bash\necho RAN\n' > src/dot_config/x/run_after_thing.sh
HOME=$PWD/home chezmoi --source $PWD/src apply -v --force --parent-dirs $PWD/home/.config/x/file.txt
# "RAN" does not print -- the script's own path wasn't a target.
Why this matters for the frontend's dotfiles tree
chezmoi_managed_paths() (tasks/system/chezmoi.py) calls chezmoi managed --include=files,scripts,symlinks, so scripts show up as their own selectable leaf entries in the tree (app.py's Tree[DotfileTreeNode]), separate from the config files next to them. Tree-node selection (on_tree_node_selected → data.all_file_paths()) selects every leaf under whichever node you click:
- Select only
noctalia/config.tomland clickapply selected→ the config applies, butrun_after_ensure-noctalia-running.sh.tmpl(a sibling leaf) does not fire. - Select the whole
noctaliafolder → the script leaf is included, so it fires. - Same rule for
run_after_check-hyprland-plugins.sh.tmplunderhypr.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +3 lines 1c7453c9c306
- 6d ago Changed · -14 lines 9616e8faad0c
- 28d ago Changed · +3 lines b0b337e71f57
- 1mo ago First seen · 79 lines · 109 tokens per session scan B c183870b46a3
chezmoi-scripts is a skill published in the GitHub repository AmineDjeghri/personal-os-setup (662 stars, last pushed today), licensed MIT. It adds 109 tokens to every session and 2,105 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
hula-skill
HuLa project skill for frontend (Vue 3 + Vite + UnoCSS + Naive UI/Vant), backend (Tauri v2 + Rust + SeaORM/SQLite), full-stack flows, and build/release work. Use when the user mentions hula or HuLa or requests changes in this repository; after triggering, ask which scope (frontend/backend/fullstack/build-release) to…
flow-launcher
Build Flow Launcher plugins with C# or Python JSON-RPC, configure plugin manifests, and integrate Everything search.
microsoft-powertoys
Configure PowerToys FancyZones, Run, Keyboard Manager, and Awake; automate settings and troubleshoot Windows utility behavior.
eartrumpet
Inspect and route per-application audio with EarTrumpet, WASAPI, and pycaw; troubleshoot audio sessions and output devices.
wsl-bash-crlf-or-tempfile
When a Windows shell (PowerShell/cmd) feeds a bash script into WSL, CRLF line endings can corrupt the first shell builtin; force LF or pipe via a temp file.
wsl-networking-mode-dns-fallback
When WSL's mirrored networking fails and falls back to "None", plus /etc/wsl.conf has generateResolvConf=false, the distro has no DNS; fix both layers.