mise-project-isolation
Fail
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to execute
curl -fsSL https://mise.run | sh, which downloads and runs a shell script from a remote server without verification. This pattern is vulnerable to supply chain attacks or man-in-the-middle interceptions if the remote domain or script content were compromised. - [COMMAND_EXECUTION]: The pattern guides users to perform actions that modify shell environments and system configurations, including shell activation and trust-based tool installation. These commands interact with the underlying operating system to manage runtimes and environment variables, which can lead to broader system changes.
Recommendations
- HIGH: Downloads and executes remote code from: https://mise.run - DO NOT USE without thorough review
Audit Metadata