mise
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices for tool management, including mandatory lockfiles and isolated virtual environments for Python CLI tools.
- [SAFE]: It explicitly prohibits high-risk patterns such as pipe-to-shell installations (
curl | bash) and unpinned versions. - [SAFE]: The 'Python CLIs: total isolation' section enforces a 'wheels only' policy for Python dependencies using
uv sync --frozen --no-build. This mitigates the risk of Remote Code Execution (RCE) during the package installation phase by preventing the execution of arbitrary build scripts often found in source distributions. - [SAFE]: Instructions correctly utilize standard package registries (npm, PyPI) and direct the agent to verify tool documentation from the official domain (mise.jdx.dev).
Audit Metadata