mise
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes the official mise installer script from
https://mise.runusing a pipe to the shell. - [COMMAND_EXECUTION]: Modifies shell startup scripts (e.g.,
~/.zshrcand~/.bashrc) to add environment activation logic, which persists across user sessions. - [COMMAND_EXECUTION]: Employs
sudofor elevated privileges to create system directories and symbolic links within/Library/Java/JavaVirtualMachines/for JDK integration on macOS. - [COMMAND_EXECUTION]: Instructs the agent to run
mise trust, which grants permission for mise to execute configuration and tasks defined in a project's localmise.tomlfile. - [EXTERNAL_DOWNLOADS]: Fetches programming language runtimes, CLIs, and other development tools from remote registries and backends including GitHub, npm, and PyPI.
Recommendations
- HIGH: Downloads and executes remote code from: https://mise.run - DO NOT USE without thorough review
Audit Metadata