スキル mirrord-quickstart
📦
mirrord-quickstart
v1.2 コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス
Start Your First mirrord Kubernetes Session
Starting local development against Kubernetes requires working cluster access, suitable tooling, and a target pod. This skill guides installation, first-session setup, and connection verification.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "mirrord-quickstart" from https://skillstore.io/skills/metalbear-co-mirrord-quickstart.md and its manifest at https://skillstore.io/api/skills/metalbear-co-mirrord-quickstart/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「mirrord-quickstart」を使用しています。 I am new to mirrord and use VS Code.
期待される結果:
- Which operating system do you use, and is kubectl already configured for your cluster?
- Confirm access to the intended cluster and namespace.
- Install the mirrord extension published by MetalBear, select an authorized target pod, and start debugging.
- Check initialization logs and verify connectivity without exposing secret values.
「mirrord-quickstart」を使用しています。 My first session cannot find any pods.
期待される結果:
- Confirm that your current Kubernetes context points to the intended cluster.
- Check for pods in the expected namespace.
- If access is denied, review the RBAC permissions for your current identity.
- List mirrord targets again after resolving namespace or access issues.
セキュリティ監査
中リスクv1 • 2026/9/29 バージョン別レポートを開く
All 19 static flags reflect Markdown formatting, legitimate prerequisite checks, or documentation links rather than the reported threats. A separate verification step risks exposing database credentials by printing remote environment values. No evidence found of prompt injection or intentional data exfiltration.
2
スキャンされたファイル
190
解析済み行数
0
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
中
Verification Can Expose Remote Database Credentials
The verification example runs env and filters database-related lines, printing complete matching values. Database connection strings or passwords can enter terminal output and assistant logs.
The command explicitly prints remote environment values without redaction. Actual credential disclosure depends on the selected pod's environment.
リスク要因
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/metalbear-co-mirrord-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
metalbear-co. (2026). mirrord-quickstart security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1BibTeX形式の引用
@techreport{metalbear-co-metalbear-co-mirrord-quickstart-2026,
author = {metalbear-co},
title = {mirrord-quickstart security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1},
note = {Author version 1.2}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mirrord-quickstart security audit report (audit version 1)"
version: "1.2"
type: report
authors:
- name: "metalbear-co"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1"
identifiers:
- type: other
value: "skillstore:metalbear-co-mirrord-quickstart:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Connect a Local Backend
Guide a developer through connecting a local Node.js or Python application to an authorized Kubernetes pod.
Standardize Developer Onboarding
Help new team members verify cluster access, choose an installation path, and troubleshoot namespace or RBAC problems.
Start an IDE Debugging Session
Walk through VS Code or IntelliJ setup, target selection, and initial connection checks before investigating application behavior.
これらのプロンプトを試す
Choose a Starting Path
I am new to mirrord. Ask about my operating system, editor, and cluster access, then guide me through the prerequisites.
Install and Verify
Help me install mirrord on [operating system] for [CLI or IDE]. Use official documentation and approved installation methods, then verify the installation.
Connect My Application
Connect my local [Node.js or Python] application to an authorized pod in [namespace]. Confirm my Kubernetes context and target before launching the session.
Diagnose a Failed Session
My mirrord session reports [error] in [namespace]. Check cluster access, namespace, RBAC, and agent requirements. Verify connectivity without printing secret environment values.
ベストプラクティス
- Confirm the Kubernetes context, namespace, and authorized target before connecting a local application.
- Use approved installation methods and verify pinned binaries against official checksums.
- Verify environment access with presence-only checks and keep credentials out of terminal output and chat.
回避
- Executing downloaded installation scripts directly through a shell.
- Connecting to an unfamiliar or production target without explicit authorization.
- Printing remote database environment values or sharing them in troubleshooting transcripts.
よくある質問
What does this skill help me accomplish?
It guides you from prerequisite checks through installation, target selection, and verification of your first mirrord session.
Which AI tools can use this skill?
The marketplace lists support for Claude, Codex, and Claude Code.
Do I need Kubernetes access first?
Yes. You need a reachable cluster, configured kubectl, and permissions for the intended target.
Can I use an IDE instead of the CLI?
Yes. The skill includes VS Code extension and IntelliJ plugin setup alongside the CLI workflow.
Is the environment verification example safe for secrets?
It can print database credentials. Use presence-only checks and never share secret values in logs or assistant conversations.
Does this skill configure advanced Teams features?
It refers users to separate Operator guidance. The source states that Teams features require the Operator and trial activation requires user agreement.
開発者情報
作成者
metalbear-coライセンス
MIT
作者バージョン
v1.2
Skillstore リビジョン
r1
バージョンに関する注意
作者が宣言したバージョンは有効な SemVer ではありません。
参照
bad9dafc37d1638cd29cb9bab06d5f8dbcd0f6c2
メンテナンスの新しさ
2026/9/30
利用状況
0 ダウンロード · 0 閲覧