mirrord-prev-env
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided configuration files (
mirrord.json) andextra_configinputs, which creates a potential surface for indirect prompt injection if the source content is untrusted. - Ingestion points: External configuration file
mirrord.jsonand theextra_configinput parameter used in the GitHub Action. - Boundary markers: The skill includes a dedicated
Security Boundariessection that explicitly instructs the agent to treat these inputs as data rather than instructions. - Capability inventory: The skill utilizes the
mirrordCLI to deploy images and manage traffic routing within Kubernetes clusters. - Sanitization: The instructions command the agent not to execute shell commands derived from these values and to review
extra_configfor unintended overrides. - [COMMAND_EXECUTION]: The skill provides numerous examples of using the
mirrord previewCLI for cluster operations. - Includes commands for starting, stopping, and checking the status of preview pods (
mirrord preview start/stop/status). - Provides Kubernetes resource definitions (RBAC) for managing identities and tokens for CI integration.
- [EXTERNAL_DOWNLOADS]: The skill references several external resources and tools provided by the vendor.
- GitHub Action: Uses
metalbear-co/mirrord-previewfor CI automation. - Helm Charts: References
metalbear/mirrord-operator-share-ingressfor deploying ingress components. - Documentation: Links to official documentation at
metalbear.comand reference workflows in themetalbear-co/playgroundrepository.
Audit Metadata