mise
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references the official installation method for 'mise' via
curl https://mise.run | sh. While this involves remote script execution, the source is the official domain for the tool being managed. - [PERSISTENCE_MECHANISMS]: The skill guides the user to add activation hooks to shell profiles (e.g.,
.bashrc,.zshrc) to enable automatic environment switching across sessions, which is standard behavior for version management tools. - [DYNAMIC_EXECUTION]: The skill defines and executes shell commands through 'mise' tasks and environment sourcing directives. It also includes a custom Bun script (
Tools/lint.ts) that uses dynamic imports to validate project configuration files locally. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill proactively addresses security risks by providing a linter that scans for hardcoded secrets in configuration files and recommends the use of git-ignored environment files with redaction mechanisms.
Audit Metadata