Yeah, would definitely prefer using a package manager from a maintained repository like nix over raw dogging remote shell scripts. E.g. from nixpkg

nix-env -iA secretspec -f https://github.com/NixOS/nixpkgs/tarball/nixpkgs-unstable