📦
Audit History
mirrord-ci - 1 audit
Audit version 1 Latest
Sep 29, 2026, 09:26 PM
Of 400 supplied alerts, 399 concern documentation or intended CI operations; signature removal presents a genuine integrity risk. Four semantic findings cover certificate bypass, privileged containers, cluster-wide network changes, and unsupported isolation assurances. No evidence found of prompt injection or covert exfiltration; two omitted static matches still require manual review. Static review was capped at 400/402 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.
4
Files scanned
4,165
Lines analyzed
9
Review items
0
False positives ignored
Confirmed security concerns (4)
High
Troubleshooting Recommends Disabling Certificate Validation
The guidance recommends "trust_any_certificate": true for certificate errors and states that every certificate becomes trusted. This can expose application connections to server impersonation and interception.
The troubleshooting example explicitly enables universal certificate trust without limiting it to an isolated diagnostic session or requiring restoration.
High
Permission Troubleshooting Broadens Container Privileges
The instructions recommend "privileged": true for permission or DNS failures. Privileged agents weaken container isolation and can expose the host when compromised.
The advice directly enables privileged execution without requiring administrator approval or evaluating narrower permissions. Actual exposure depends on deployment policy.
Medium
CI Troubleshooting Changes Cluster-Wide Networking
The Cilium workaround upgrades the release in kube-system and restarts its DaemonSet. Applying it without administrator review can disrupt networking for unrelated workloads.
The commands directly change cluster networking infrastructure, but the surrounding instructions provide no change approval, maintenance window, or rollback requirement.
Medium
Isolation Assurance Omits Shared Dependency Side Effects
The skill promises isolated execution without workload interference, but its examples connect directly to shared services without configuring database or traffic isolation. Tests can therefore modify shared data or trigger downstream effects.
The unconditional assurance exceeds the protections configured in the examples. The schema documents outbound traffic tunneling, which does not itself isolate dependency writes.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
sudo privilege escalation
`sudo codesign --remove-signature ./<your-binary>`
The command uses sudo to remove a copied binary's signature for SIP troubleshooting. This weakens binary integrity protections despite its legitimate compatibility purpose.
Risk Factors
⚙️ External commands (50)
references/schema.json:4 references/schema.json:94 references/schema.json:102 references/schema.json:110 references/schema.json:126 references/schema.json:134 references/schema.json:146 references/schema.json:154 references/schema.json:166 references/schema.json:178-220 references/schema.json:220-230 references/schema.json:230 references/schema.json:247 references/schema.json:317 references/schema.json:322 references/schema.json:359 references/schema.json:381-397 references/schema.json:397-405 references/schema.json:405 references/schema.json:417 references/schema.json:425 references/schema.json:436 references/schema.json:444 references/schema.json:452 references/schema.json:463 references/schema.json:491 references/schema.json:507 references/schema.json:515 references/schema.json:526 references/schema.json:534-542 references/schema.json:542 references/schema.json:566 references/schema.json:574-584 references/schema.json:584 references/schema.json:595-610 references/schema.json:610-617 references/schema.json:617-658 references/schema.json:658 references/schema.json:683 references/schema.json:688 references/schema.json:698 references/schema.json:724-729 references/schema.json:729 references/schema.json:740 references/schema.json:756-764 references/schema.json:764 references/schema.json:772 references/schema.json:781 references/schema.json:818 references/schema.json:886
🌐 Network access (47)
references/schema.json:220 references/schema.json:3173 references/schema.json:2 references/schema.json:4 references/schema.json:212 references/schema.json:230 references/schema.json:381 references/schema.json:417 references/schema.json:425 references/schema.json:658 references/schema.json:818 references/schema.json:1356 references/schema.json:1462 references/schema.json:1494 references/schema.json:1564 references/schema.json:1572 references/schema.json:1657 references/schema.json:1662 references/schema.json:1807 references/schema.json:1867 references/schema.json:1875 references/schema.json:1883 references/schema.json:1935 references/schema.json:2058 references/schema.json:2105 references/schema.json:2118 references/schema.json:2453 references/schema.json:2501 references/schema.json:2542 references/schema.json:3447 references/schema.json:3454 references/schema.json:3490 references/schema.json:4 references/schema.json:491 references/schema.json:772 references/schema.json:1325 references/schema.json:1595 references/schema.json:1657 references/schema.json:2453 references/schema.json:2501 references/schema.json:2556 SKILL.md:31 SKILL.md:179 SKILL.md:205 SKILL.md:441 SKILL.md:442 SKILL.md:443
📁 Filesystem access (30)
references/schema.json:280 references/schema.json:292 references/schema.json:304 references/schema.json:247 references/schema.json:4 references/schema.json:110 references/schema.json:4 references/schema.json:110 references/schema.json:2969 references/schema.json:1580 references/schema.json:247 references/schema.json:683 references/schema.json:688 references/troubleshooting.md:70 references/troubleshooting.md:71 SKILL.md:173 SKILL.md:174 SKILL.md:209 SKILL.md:210 SKILL.md:234 SKILL.md:235 SKILL.md:173 SKILL.md:174 SKILL.md:209 SKILL.md:210 SKILL.md:234 SKILL.md:235 SKILL.md:147 SKILL.md:153 SKILL.md:353
Audited by: codex