mise

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (medium risk: 0.30). The skill explicitly instructs installing mise by piping a remote shell script from a single external URL ("curl https://mise.run | sh"), which directs download-and-execute of code from mise.run.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Tools/lint.ts, the required runtime workflow reads and scans the user-provided mise.toml raw text (including string literals) and thus can ingest outsider-authored free text when the attacker can supply/commit a mise.toml that gets linted/trusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill tells the operator to install mise at runtime by piping a remote installer into a shell via "curl https://mise.run | sh", which fetches and executes remote code (https://mise.run).