mirrord-operator

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the mirrord operator Helm chart and configuration files from official project repositories on GitHub and Google Container Registry (ghcr.io/metalbear-co/*, github.com/metalbear-co/*). These are well-known, vendor-owned sources consistent with the skill's purpose.
  • [COMMAND_EXECUTION]: The skill involves executing standard Kubernetes management commands (helm, kubectl, mirrord) to install and configure the operator. The instructions follow security best practices by recommending the use of Kubernetes Secrets for sensitive credentials instead of command-line arguments.
  • [SAFE]: The skill implements strong security boundaries, explicitly instructing the agent to never echo or display API keys, and requiring explicit user confirmation before any cluster-modifying commands are executed. It provides legitimate mechanisms for trial activation and air-gapped installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 02:57 PM