Habilidades mirrord-quickstart

📦

mirrord-quickstart

Name: mirrord-quickstart
Author: metalbear-co

v1.2 Revisão do conteúdo r1 Risco Médio ⚙️ Comandos externos🌐 Acesso à rede

Start Your First mirrord Kubernetes Session

Starting local development against Kubernetes requires working cluster access, suitable tooling, and a target pod. This skill guides installation, first-session setup, and connection verification.

Suporta: Claude Codex Code(CC)

📊 70 Adequado

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "mirrord-quickstart" from https://skillstore.io/skills/metalbear-co-mirrord-quickstart.md and its manifest at https://skillstore.io/api/skills/metalbear-co-mirrord-quickstart/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/metalbear-co-mirrord-quickstart.md manifest assinado GET /api/skills/metalbear-co-mirrord-quickstart/manifest lockfile assinado GET /api/skills/metalbear-co-mirrord-quickstart/lockfile

Testar

Usando "mirrord-quickstart". I am new to mirrord and use VS Code.

Resultado esperado:

Which operating system do you use, and is kubectl already configured for your cluster?
Confirm access to the intended cluster and namespace.
Install the mirrord extension published by MetalBear, select an authorized target pod, and start debugging.
Check initialization logs and verify connectivity without exposing secret values.

Usando "mirrord-quickstart". My first session cannot find any pods.

Resultado esperado:

Confirm that your current Kubernetes context points to the intended cluster.
Check for pods in the expected namespace.
If access is denied, review the RBAC permissions for your current identity.
List mirrord targets again after resolving namespace or access issues.

Auditoria de segurança

Risco Médio

v1 • 29/09/2026 Abrir o relatório versionado

All 19 static flags reflect Markdown formatting, legitimate prerequisite checks, or documentation links rather than the reported threats. A separate verification step risks exposing database credentials by printing remote environment values. No evidence found of prompt injection or intentional data exfiltration.

Arquivos analisados

190

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Preocupações de segurança confirmadas (1)

Médio

SKILL.md:98-105

Verification Can Expose Remote Database Credentials

The verification example runs env and filters database-related lines, printing complete matching values. Database connection strings or passwords can enter terminal output and assistant logs.

The command explicitly prints remote environment values without redaction. Actual credential disclosure depends on the selected pod's environment.

Fatores de risco

⚙️ Comandos externos (14)

SKILL.md:28-32 SKILL.md:32-51 SKILL.md:51-53 SKILL.md:53-73 SKILL.md:73-85 SKILL.md:85-102 SKILL.md:102-105 SKILL.md:105-110 SKILL.md:110-111 SKILL.md:111 SKILL.md:112-120 SKILL.md:120-137 SKILL.md:137-139 SKILL.md:139-140

🌐 Acesso à rede (3)

SKILL.md:42 SKILL.md:110 SKILL.md:112

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg)](https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/metalbear-co-mirrord-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

metalbear-co. (2026). mirrord-quickstart security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1

Citação BibTeX

@techreport{metalbear-co-metalbear-co-mirrord-quickstart-2026,
  author = {metalbear-co},
  title = {mirrord-quickstart security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1},
  note = {Author version 1.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mirrord-quickstart security audit report (audit version 1)"
version: "1.2"
type: report
authors:
  - name: "metalbear-co"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1"
identifiers:
  - type: other
    value: "skillstore:metalbear-co-mirrord-quickstart:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Connect a Local Backend

Guide a developer through connecting a local Node.js or Python application to an authorized Kubernetes pod.

Standardize Developer Onboarding

Help new team members verify cluster access, choose an installation path, and troubleshoot namespace or RBAC problems.

Start an IDE Debugging Session

Walk through VS Code or IntelliJ setup, target selection, and initial connection checks before investigating application behavior.

Teste estes prompts

Choose a Starting Path

I am new to mirrord. Ask about my operating system, editor, and cluster access, then guide me through the prerequisites.

Install and Verify

Help me install mirrord on [operating system] for [CLI or IDE]. Use official documentation and approved installation methods, then verify the installation.

Connect My Application

Connect my local [Node.js or Python] application to an authorized pod in [namespace]. Confirm my Kubernetes context and target before launching the session.

Diagnose a Failed Session

My mirrord session reports [error] in [namespace]. Check cluster access, namespace, RBAC, and agent requirements. Verify connectivity without printing secret environment values.

Boas práticas

Confirm the Kubernetes context, namespace, and authorized target before connecting a local application.
Use approved installation methods and verify pinned binaries against official checksums.
Verify environment access with presence-only checks and keep credentials out of terminal output and chat.

Evitar

Executing downloaded installation scripts directly through a shell.
Connecting to an unfamiliar or production target without explicit authorization.
Printing remote database environment values or sharing them in troubleshooting transcripts.

Perguntas frequentes

What does this skill help me accomplish?

It guides you from prerequisite checks through installation, target selection, and verification of your first mirrord session.

Which AI tools can use this skill?

The marketplace lists support for Claude, Codex, and Claude Code.

Do I need Kubernetes access first?

Yes. You need a reachable cluster, configured kubectl, and permissions for the intended target.

Can I use an IDE instead of the CLI?

Yes. The skill includes VS Code extension and IntelliJ plugin setup alongside the CLI workflow.

Is the environment verification example safe for secrets?

It can print database credentials. Use presence-only checks and never share secret values in logs or assistant conversations.

Does this skill configure advanced Teams features?

It refers users to separate Operator guidance. The source states that Teams features require the Operator and trial activation requires user agreement.