mandex
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads documentation packages and a semantic reranking model from the vendor's CDN (
cdn.mandex.dev). These downloads are verified using SHA-256 checksums to ensure integrity. - [COMMAND_EXECUTION]: Provides commands to install the
mxutility and perform operations such as pulling, searching, and building documentation indexes. - [DATA_EXFILTRATION]: The
mx synccommand scans project-level dependency files (e.g.,package.json,Cargo.toml) to identify and download matching documentation. This operation is localized and supports the tool's core functionality. - [PROMPT_INJECTION]: Includes specific instructions for the agent to treat documentation search results as untrusted content and avoid automated execution of code snippets found within.
Audit Metadata