Install
$ agentstack add skill-ypares-agent-skills-nix-profile-manager ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Nix Profile Manager for Agents
Overview
This skill enables agents to maintain a local Nix profile in a user-provided directory, allowing dynamic installation of tools without requiring system-wide package management or sudo access.
Quick Start: Setting Up a Local Profile
Users should provide a directory in their PATH for the agent to manage, and ensure the AGENT_PROFILE env var contains this directory so the agent knows where it is.
Then the agent just does:
nix profile add --profile "$AGENT_PROFILE" "nixpkgs#git"
The --profile flag tells Nix to store the profile metadata in that location. The bin dir created by Nix in the profile must be in the PATH.
NOTE: on older Nix versions, the add sub-command was called install. Keep this in mind if you get errors saying that "add" does not exist.
Core Concepts
Profiles
A profile is a directory containing:
manifest.json- list of installed packages and their flake referencesbin,lib,share, etc. - folders with symlinks to binaries, libs, docs in the Nix store
When you run nix profile add, Nix updates the manifest and recreates symlinks.
Flakes
A flake is a standardized Nix package collection with:
- A
flake.nixfile defining inputs and outputs - Deterministic versioning via
flake.lock - Multiple output schemes (packages, overlays, modules, etc.)
Common flakes:
nixpkgs- Standard package library (the default registry), usually an alias forgithub:NixOS/nixpkgs/nixpkgs-unstable- Custom flakes from GitHub (e.g.,
github:user/repo)
Packages vs. Flakes
- Package: A single tool (e.g.,
git,python311) - Flake: A collection of packages, accessed as
#
IMPORTANT: In some flakes (like nixpkgs) packages can be nested: #.
Essential Commands
Search for Packages
# Search in nixpkgs flake:
nix search nixpkgs git
# Search in specific (fully qualified) flake
nix search "github:user/repo[/branch]"
# Or get a more detailed JSON output
nix search nixpkgs python3 --json | jq '.[].pname'
Manage Profile
# Add package
nix profile add --profile "#"
# List installed packages
nix profile list --profile
# Remove by index or element number
nix profile remove --profile /profile 0
# Upgrade packages
nix profile upgrade --profile
nix profile upgrade --profile --all # All packages installed in this profile
Registry Management
# List available flake aliases
nix registry list
# Add custom registry entry (user-level)
nix registry add myflake github:user/repo/branch
General Workflow
# Determine profile path:
echo $AGENT_PROFILE # If not defined, ask the user which profile to use!!
# Search for the package
nix search nixpkgs git
# Add it
nix profile add --profile "$AGENT_PROFILE" "nixpkgs#git"
# Just use it!
tool-cmd ...
Important Details
- Profile path
binsub-folder should be in PATH: The directory containing the profile must be in$PATHfor linked binaries to be accessible - Flake references are immutable:
nixpkgs#gitresolves to the current nixpkgs version; usegithub:user/repo/ref#packageto pin to specific refs - Profile locking: Only one agent should modify a profile at a time; locking is not automatic
- Store links don't expire: Nix store paths remain valid even if the flake changes; profiles maintain old package paths if needed
Troubleshooting
Package not found:
- Ensure flake name is correct:
nix registry listshows available aliases - Search with
nix searchto find exact package name
Command not in PATH after install:
- Check profile directory is in
$PATH:echo $PATH - Verify $AGENT_PROFILE was created:
ls -la $AGENT_PROFILE(adjust path as needed)
Permission denied:
- Local profiles DO NOT require sudo. Report to user in case of permission problems
References
references/flakes.md- In-depth flake concepts and GitHub referencesreferences/package-search.md- Advanced package discovery techniquesreferences/profile-internals.md- Profile structure and manifest formatreferences/registry.md- Custom registry configuration and pinning
For Agent Implementation
When implementing profile management in an agent:
- Accept profile path as environment variable or parameter - e.g.,
AGENT_PROFILEor function arg - Always search before installing - verify package exists and name is exact
- Use
--jsonoutput for parsing - more reliable than text output - Handle errors gracefully - packages may not exist in all flakes
- Notify about profile modifications - help users track what was installed
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: YPares
- Source: YPares/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.