Habilidades mirrord-quickstart

📦

mirrord-quickstart

Name: mirrord-quickstart
Author: metalbear-co

v1.2 Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red

Start Your First mirrord Kubernetes Session

Starting local development against Kubernetes requires working cluster access, suitable tooling, and a target pod. This skill guides installation, first-session setup, and connection verification.

Compatible con: Claude Codex Code(CC)

📊 70 Adecuado

Maintain this Skill? Claim it 📊 70 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "mirrord-quickstart" from https://skillstore.io/skills/metalbear-co-mirrord-quickstart.md and its manifest at https://skillstore.io/api/skills/metalbear-co-mirrord-quickstart/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/metalbear-co-mirrord-quickstart.md Manifest firmado GET /api/skills/metalbear-co-mirrord-quickstart/manifest Lockfile firmado GET /api/skills/metalbear-co-mirrord-quickstart/lockfile

Pruébalo

Usando "mirrord-quickstart". I am new to mirrord and use VS Code.

Resultado esperado:

Which operating system do you use, and is kubectl already configured for your cluster?
Confirm access to the intended cluster and namespace.
Install the mirrord extension published by MetalBear, select an authorized target pod, and start debugging.
Check initialization logs and verify connectivity without exposing secret values.

Usando "mirrord-quickstart". My first session cannot find any pods.

Resultado esperado:

Confirm that your current Kubernetes context points to the intended cluster.
Check for pods in the expected namespace.
If access is denied, review the RBAC permissions for your current identity.
List mirrord targets again after resolving namespace or access issues.

Auditoría de seguridad

Riesgo medio

v1 • 29/9/2026 Abrir el informe versionado

All 19 static flags reflect Markdown formatting, legitimate prerequisite checks, or documentation links rather than the reported threats. A separate verification step risks exposing database credentials by printing remote environment values. No evidence found of prompt injection or intentional data exfiltration.

Archivos escaneados

190

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:98-105

Verification Can Expose Remote Database Credentials

The verification example runs env and filters database-related lines, printing complete matching values. Database connection strings or passwords can enter terminal output and assistant logs.

The command explicitly prints remote environment values without redaction. Actual credential disclosure depends on the selected pod's environment.

Factores de riesgo

⚙️ Comandos externos (14)

SKILL.md:28-32 SKILL.md:32-51 SKILL.md:51-53 SKILL.md:53-73 SKILL.md:73-85 SKILL.md:85-102 SKILL.md:102-105 SKILL.md:105-110 SKILL.md:110-111 SKILL.md:111 SKILL.md:112-120 SKILL.md:120-137 SKILL.md:137-139 SKILL.md:139-140

🌐 Acceso a red (3)

SKILL.md:42 SKILL.md:110 SKILL.md:112

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg)](https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/metalbear-co-mirrord-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

metalbear-co. (2026). mirrord-quickstart security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1

Cita BibTeX

@techreport{metalbear-co-metalbear-co-mirrord-quickstart-2026,
  author = {metalbear-co},
  title = {mirrord-quickstart security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1},
  note = {Author version 1.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mirrord-quickstart security audit report (audit version 1)"
version: "1.2"
type: report
authors:
  - name: "metalbear-co"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1"
identifiers:
  - type: other
    value: "skillstore:metalbear-co-mirrord-quickstart:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Connect a Local Backend

Guide a developer through connecting a local Node.js or Python application to an authorized Kubernetes pod.

Standardize Developer Onboarding

Help new team members verify cluster access, choose an installation path, and troubleshoot namespace or RBAC problems.

Start an IDE Debugging Session

Walk through VS Code or IntelliJ setup, target selection, and initial connection checks before investigating application behavior.

Prueba estos prompts

Choose a Starting Path

I am new to mirrord. Ask about my operating system, editor, and cluster access, then guide me through the prerequisites.

Install and Verify

Help me install mirrord on [operating system] for [CLI or IDE]. Use official documentation and approved installation methods, then verify the installation.

Connect My Application

Connect my local [Node.js or Python] application to an authorized pod in [namespace]. Confirm my Kubernetes context and target before launching the session.

Diagnose a Failed Session

My mirrord session reports [error] in [namespace]. Check cluster access, namespace, RBAC, and agent requirements. Verify connectivity without printing secret environment values.

Mejores prácticas

Confirm the Kubernetes context, namespace, and authorized target before connecting a local application.
Use approved installation methods and verify pinned binaries against official checksums.
Verify environment access with presence-only checks and keep credentials out of terminal output and chat.

Evitar

Executing downloaded installation scripts directly through a shell.
Connecting to an unfamiliar or production target without explicit authorization.
Printing remote database environment values or sharing them in troubleshooting transcripts.

Preguntas frecuentes

What does this skill help me accomplish?

It guides you from prerequisite checks through installation, target selection, and verification of your first mirrord session.

Which AI tools can use this skill?

The marketplace lists support for Claude, Codex, and Claude Code.

Do I need Kubernetes access first?

Yes. You need a reachable cluster, configured kubectl, and permissions for the intended target.

Can I use an IDE instead of the CLI?

Yes. The skill includes VS Code extension and IntelliJ plugin setup alongside the CLI workflow.

Is the environment verification example safe for secrets?

It can print database credentials. Use presence-only checks and never share secret values in logs or assistant conversations.

Does this skill configure advanced Teams features?

It refers users to separate Operator guidance. The source states that Teams features require the Operator and trial activation requires user agreement.