{"id":"mistral.ai/vibe","name":"Mistral Vibe","commands":["vibe"],"examples":[{"run":"vibe --setup","does":"Configure your Mistral API key or sign in"},{"run":"vibe","does":"Start an interactive session in the current project"},{"run":"vibe \"<task>\"","does":"Start a session with an initial prompt"},{"run":"vibe --continue","does":"Resume the most recent session"}],"description":"Minimal command line coding agent from Mistral AI.","homepage":"https://github.com/mistralai/mistral-vibe","repository":"https://github.com/mistralai/mistral-vibe","license":"Apache-2.0","agentic":true,"latest_version":"3.1.0","vendor":"Mistral AI","install":"curl -LsSf https://mistral.ai/vibe/install.sh | bash","publisher":"third-party","w3bs":"w3bs install mistral.ai/vibe","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":4117,"summary":{"critical":0,"high":0,"medium":4,"low":11,"info":0},"malware":0,"truncated":false,"version":"3.1.0","sources":{"installer":"https://mistral.ai/vibe/install.sh","installerSha256":"d73a7dac1f03d1de6aba0af6d25312e9fe19404fd20fbe56afa9a6f328c4b1a0","repository":"github.com/mistralai/mistral-vibe"},"notes":[],"scannedAt":"2026-11-05T04:48:09.659Z","findings":[{"ruleId":"py-stack-trace-returned","title":"stack trace returned to the caller","severity":"medium","category":"code","cwe":"CWE-209","file":"source/vibe/app_server/_host.py","line":939,"malware":false},{"ruleId":"py-weak-hash","title":"broken hash algorithm","severity":"medium","category":"code","cwe":"CWE-327","file":"source/vibe/app_server/_projection.py","line":358,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/vibe/core/plugins/_claude.py","line":36,"malware":false},{"ruleId":"py-template-autoescape-off","title":"template rendering with escaping disabled","severity":"medium","category":"code","cwe":"CWE-79","file":"source/vibe/core/skills/registry/_service.py","line":181,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"low","category":"code","cwe":"CWE-918","file":"source/harness/runtimes/python/python/mistralai_vibe_local_harness/vibe/_runtime.py","line":5209,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/README.md","line":825,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/app_server/test_mcp_auth.py","line":169,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/app_server/test_mcp_auth.py","line":481,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/app_server/test_mcp_auth.py","line":785,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/app_server/test_mcp_auth.py","line":785,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/core/config/test_session_credentials.py","line":127,"malware":false},{"ruleId":"tls-verification-disabled","title":"TLS certificate verification disabled","severity":"low","category":"code","cwe":"CWE-295","file":"source/tests/core/platform_auth/test_http.py","line":166,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"low","category":"code","cwe":"CWE-1333","file":"source/tests/skills/registry/test_models.py","line":132,"malware":false},{"ruleId":"py-stack-trace-returned","title":"stack trace returned to the caller","severity":"low","category":"code","cwe":"CWE-209","file":"source/tests/stubs/fake_agent_server.py","line":195,"malware":false},{"ruleId":"py-stack-trace-returned","title":"stack trace returned to the caller","severity":"low","category":"code","cwe":"CWE-209","file":"source/tests/stubs/fake_agent_server.py","line":197,"malware":false}]}}