mir-extract-snippet
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx mirto execute commands for creating, syncing, and installing snippets. These operations are performed locally as part of the snippet management workflow.\n- [EXTERNAL_DOWNLOADS]: Usesnpxto fetch and run themirpackage from the official npm registry.\n- [PROMPT_INJECTION]: The skill processes untrusted code from the user's project, creating an indirect prompt injection surface. \n - Ingestion points: Project source code and configuration files as described in the extraction steps in SKILL.md.\n
- Boundary markers: Absent; the skill does not use specific delimiters to isolate untrusted content during processing.\n
- Capability inventory: File system access and command execution via the
mirCLI.\n - Sanitization: None; the skill does not sanitize the content or logic of the ingested code.
Audit Metadata