ai-provider-mistral-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official packages
@mistralai/mistralaiandzod. These are standard dependencies for integrating with Mistral AI services. - [DATA_EXFILTRATION]: Security best practices are followed regarding credential management. The skill explicitly instructs against hardcoding API keys and demonstrates using
process.env["MISTRAL_API_KEY"]and async key providers for dynamic rotation. - [INDIRECT_PROMPT_INJECTION]: The skill patterns include ingesting external content (URLs, text blocks) into LLM prompts. While this is a standard operational requirement for the described use cases, the skill emphasizes mitigation through structured output parsing with Zod, which enforces a specific schema on the model's response.
- [SAFE]: Analysis of the skill instructions and code examples reveals no malicious intent, hidden code, persistence mechanisms, or unauthorized data access patterns. The skill serves its stated purpose as a developer guide for the Mistral AI SDK.
Audit Metadata