mirrord-operator
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the mirrord operator Helm chart and configuration files from official project repositories on GitHub and Google Container Registry (
ghcr.io/metalbear-co/*,github.com/metalbear-co/*). These are well-known, vendor-owned sources consistent with the skill's purpose. - [COMMAND_EXECUTION]: The skill involves executing standard Kubernetes management commands (
helm,kubectl,mirrord) to install and configure the operator. The instructions follow security best practices by recommending the use of Kubernetes Secrets for sensitive credentials instead of command-line arguments. - [SAFE]: The skill implements strong security boundaries, explicitly instructing the agent to never echo or display API keys, and requiring explicit user confirmation before any cluster-modifying commands are executed. It provides legitimate mechanisms for trial activation and air-gapped installation.
Audit Metadata