Навыки mirrord-quickstart

📦

mirrord-quickstart

Name: mirrord-quickstart
Author: metalbear-co

v1.2 Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети

Start Your First mirrord Kubernetes Session

Starting local development against Kubernetes requires working cluster access, suitable tooling, and a target pod. This skill guides installation, first-session setup, and connection verification.

Поддерживает: Claude Codex Code(CC)

📊 70 Адекватно

Maintain this Skill? Claim it 📊 70 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "mirrord-quickstart" from https://skillstore.io/skills/metalbear-co-mirrord-quickstart.md and its manifest at https://skillstore.io/api/skills/metalbear-co-mirrord-quickstart/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/metalbear-co-mirrord-quickstart.md Подписанный manifest GET /api/skills/metalbear-co-mirrord-quickstart/manifest Подписанный lockfile GET /api/skills/metalbear-co-mirrord-quickstart/lockfile

Протестировать

Использование «mirrord-quickstart». I am new to mirrord and use VS Code.

Ожидаемый результат:

Which operating system do you use, and is kubectl already configured for your cluster?
Confirm access to the intended cluster and namespace.
Install the mirrord extension published by MetalBear, select an authorized target pod, and start debugging.
Check initialization logs and verify connectivity without exposing secret values.

Использование «mirrord-quickstart». My first session cannot find any pods.

Ожидаемый результат:

Confirm that your current Kubernetes context points to the intended cluster.
Check for pods in the expected namespace.
If access is denied, review the RBAC permissions for your current identity.
List mirrord targets again after resolving namespace or access issues.

Аудит безопасности

Средний риск

v1 • 29.09.2026 Открыть версионный отчет

All 19 static flags reflect Markdown formatting, legitimate prerequisite checks, or documentation links rather than the reported threats. A separate verification step risks exposing database credentials by printing remote environment values. No evidence found of prompt injection or intentional data exfiltration.

Просканировано файлов

190

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

SKILL.md:98-105

Verification Can Expose Remote Database Credentials

The verification example runs env and filters database-related lines, printing complete matching values. Database connection strings or passwords can enter terminal output and assistant logs.

The command explicitly prints remote environment values without redaction. Actual credential disclosure depends on the selected pod's environment.

Факторы риска

⚙️ Внешние команды (14)

SKILL.md:28-32 SKILL.md:32-51 SKILL.md:51-53 SKILL.md:53-73 SKILL.md:73-85 SKILL.md:85-102 SKILL.md:102-105 SKILL.md:105-110 SKILL.md:110-111 SKILL.md:111 SKILL.md:112-120 SKILL.md:120-137 SKILL.md:137-139 SKILL.md:139-140

🌐 Доступ к сети (3)

SKILL.md:42 SKILL.md:110 SKILL.md:112

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg)](https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/metalbear-co-mirrord-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/metalbear-co-mirrord-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/metalbear-co-mirrord-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

metalbear-co. (2026). mirrord-quickstart security audit report (audit version 1) [Author version 1.2]. Skillstore. https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1

Цитата BibTeX

@techreport{metalbear-co-metalbear-co-mirrord-quickstart-2026,
  author = {metalbear-co},
  title = {mirrord-quickstart security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1},
  note = {Author version 1.2}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mirrord-quickstart security audit report (audit version 1)"
version: "1.2"
type: report
authors:
  - name: "metalbear-co"
date-released: "2026-09-29"
url: "https://skillstore.io/skills/metalbear-co-mirrord-quickstart/audits/1"
identifiers:
  - type: other
    value: "skillstore:metalbear-co-mirrord-quickstart:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Connect a Local Backend

Guide a developer through connecting a local Node.js or Python application to an authorized Kubernetes pod.

Standardize Developer Onboarding

Help new team members verify cluster access, choose an installation path, and troubleshoot namespace or RBAC problems.

Start an IDE Debugging Session

Walk through VS Code or IntelliJ setup, target selection, and initial connection checks before investigating application behavior.

Попробуйте эти промпты

Choose a Starting Path

I am new to mirrord. Ask about my operating system, editor, and cluster access, then guide me through the prerequisites.

Install and Verify

Help me install mirrord on [operating system] for [CLI or IDE]. Use official documentation and approved installation methods, then verify the installation.

Connect My Application

Connect my local [Node.js or Python] application to an authorized pod in [namespace]. Confirm my Kubernetes context and target before launching the session.

Diagnose a Failed Session

My mirrord session reports [error] in [namespace]. Check cluster access, namespace, RBAC, and agent requirements. Verify connectivity without printing secret environment values.

Лучшие практики

Confirm the Kubernetes context, namespace, and authorized target before connecting a local application.
Use approved installation methods and verify pinned binaries against official checksums.
Verify environment access with presence-only checks and keep credentials out of terminal output and chat.

Избегать

Executing downloaded installation scripts directly through a shell.
Connecting to an unfamiliar or production target without explicit authorization.
Printing remote database environment values or sharing them in troubleshooting transcripts.

Часто задаваемые вопросы

What does this skill help me accomplish?

It guides you from prerequisite checks through installation, target selection, and verification of your first mirrord session.

Which AI tools can use this skill?

The marketplace lists support for Claude, Codex, and Claude Code.

Do I need Kubernetes access first?

Yes. You need a reachable cluster, configured kubectl, and permissions for the intended target.

Can I use an IDE instead of the CLI?

Yes. The skill includes VS Code extension and IntelliJ plugin setup alongside the CLI workflow.

Is the environment verification example safe for secrets?

It can print database credentials. Use presence-only checks and never share secret values in logs or assistant conversations.

Does this skill configure advanced Teams features?

It refers users to separate Operator guidance. The source states that Teams features require the Operator and trial activation requires user agreement.