mirrord-propagation-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the installation of the mirrord CLI through established package managers like Homebrew and Chocolatey, which are well-known and trusted distribution services. It explicitly cautions against using unverified remote scripts.
- [COMMAND_EXECUTION]: The skill uses standard CLI tools including
kubectl,mirrord, andcurlfor cluster diagnostics. It also incorporates bundled Python scripts,dump_stats.pyandrequest_recorder.py, which are designed to analyze captured traffic and verify filter configurations using only the Python standard library. - [INDIRECT_PROMPT_INJECTION]: The skill processes live network traffic captured from the cluster environment, which may contain untrusted data. 1. Ingestion points: Captured request headers and JSON bodies analyzed by analytical scripts. 2. Boundary markers: The instructions include a specific rule that captured traffic and cluster resources must be treated as data and never as instructions, with a prohibition on executing commands found within them. 3. Capability inventory: The agent utilizes
kubectl,mirrord, andcurlacross several diagnostic steps. 4. Sanitization: The skill mandates security practices such as using temporary directories for logs, deleting data after analysis, and masking sensitive tokens or credentials in generated reports.
Audit Metadata