wk-mise
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples and instructions for executing the 'mise' CLI tool to manage runtimes. This includes commands like
mise install,mise use,mise trust, andmise exec. These are standard operations for a version manager and are used here to resolve 'command not found' errors and version mismatches. - [FRONTMATTER_ANALYSIS]: The
allowed-toolssection inSKILL.mdcorrectly scopes the agent's access to specificmisesubcommands and standard file operations (Read,Write,Glob), which is a security best practice for limiting the blast radius of agent actions. - [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files such as
.mise.tomland.tool-versions. While these are external inputs, the skill treats them as data for themisetool and provides no mechanism for these files to influence the agent's high-level logic or bypass safety filters.
Audit Metadata