mirrord-config
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to check for the local presence of the
mirrordCLI and use it for authoritative configuration validation. The instructions include explicit safeguards to ensure the agent does not execute any commands derived from user-provided configuration values. - [EXTERNAL_DOWNLOADS]: The reference files contain links to official documentation on
mirrord.devand source code/images on GitHub and GitHub Container Registry (ghcr.io). These are well-known services and the resources belong to the official project repository. - [PROMPT_INJECTION]: The instructions incorporate a security boundary, directing the agent to treat all user-provided JSON content as data only and to ignore any embedded instructions. This effectively mitigates indirect prompt injection risks.
- [REMOTE_CODE_EXECUTION]: The skill specifically prohibits the generation of remote pipe-to-shell installation commands or mandatory package manager one-liners, ensuring that users are directed to official installation paths instead.
Audit Metadata