fix-mise
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it processes untrusted data from command logs and configuration files. \n
- Ingestion points: Captures failing command outputs and error messages as defined in the workflow in
SKILL.md. \n - Boundary markers: Absent; no specific instructions are provided to use delimiters or ignore embedded instructions when processing external error logs. \n
- Capability inventory: The skill invokes
miseCLI commands includingtrust,install, anduseas listed inSKILL.md. \n - Sanitization: Instructions in
SKILL.mdexplicitly require redacting secrets and sensitive environment details before processing. \n- [COMMAND_EXECUTION]: The skill executes themisecommand-line utility to perform diagnostic and configuration tasks. Evidence of this intended behavior is found inSKILL.mdandreferences/contract.yaml. \n- [EXTERNAL_DOWNLOADS]: The skill usesmise installandmise upgradeto fetch runtime environments from official and well-known registries. This is a standard and expected operation for themisetoolchain as described inSKILL.md.
Audit Metadata