📦
Audit History
mirrord-temporal - 1 audit
Audit version 1 Latest
Sep 29, 2026, 10:08 PM
The static matches are mostly false positives caused by Markdown backticks, shell examples, placeholder certificate names, and secret-reference documentation. The skill still presents operational risk because it permits broad cluster discovery and mentions agent-directed operator installation, which require explicit authorization and least-privilege controls.
4
Files scanned
604
Lines analyzed
4
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Agent-Directed Cluster Installation
The skill tells an AI agent that it may start a trial and install the mirrord operator after user agreement. Installing an operator changes cluster state and can grant broad control-plane access, so the action requires explicit confirmation and least-privilege review.
The instruction explicitly describes starting a trial and installing an operator. The operational impact is clear, although it requires user agreement and refers to another skill for the procedure.
Medium
Broad Cluster Discovery
The discovery workflow queries namespaces, workloads, CRDs, resources across all namespaces, deployment YAML, and services. These read-only queries can expose cluster topology and configuration metadata, so output handling and RBAC scope require controls.
The referenced commands visibly inspect multiple cluster-wide resource types. They are read-only, but the breadth of metadata access creates a confidentiality and least-privilege concern.
Risk Factors
⚙️ External commands (50)
SKILL.md:20 SKILL.md:26 SKILL.md:28 SKILL.md:29 SKILL.md:31 SKILL.md:38 SKILL.md:41 SKILL.md:55 SKILL.md:56 SKILL.md:62-77 SKILL.md:77-79 SKILL.md:79-82 SKILL.md:82-85 SKILL.md:85-91 SKILL.md:91-92 SKILL.md:92-97 SKILL.md:97-101 SKILL.md:101-109 SKILL.md:109-115 SKILL.md:115-122 SKILL.md:122-123 SKILL.md:123 SKILL.md:124 SKILL.md:125 SKILL.md:126 SKILL.md:129-142 SKILL.md:142-144 SKILL.md:144-152 SKILL.md:152 SKILL.md:153 SKILL.md:154 SKILL.md:155 SKILL.md:156 SKILL.md:157 SKILL.md:159-183 SKILL.md:183-185 SKILL.md:185 SKILL.md:189-191 SKILL.md:191-192 SKILL.md:192-205 SKILL.md:205-206 SKILL.md:206-208 SKILL.md:208-209 SKILL.md:209-210 SKILL.md:210-211 SKILL.md:211 SKILL.md:214 SKILL.md:216-217 SKILL.md:217-230 SKILL.md:230-231
📁 Filesystem access (9)
Audited by: codex