auditing-host-mount-and-device-exposure SKILL.md skillA
auditing-host-mount-and-device-exposure from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/auditing-host-mount-and-device-exposure@git:20260828.ce55026Pins git:20260828.ce55026 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/auditing-host-mount-and-device-exposure/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260828.ce55026, committed Aug 28, 2026
- Size
- 9,393 bytes
- Repository stars
- 26
- License
- MIT
Audit the host paths and devices a workload mounts for reach across the container boundary onto the node: a writable hostPath into a sensitive node directory, a mount of the host root or a system path that exposes other pods' data and node configuration, a raw device or block volume that grants low-level host access, and a hostPath whose subpath or symlink handling lets a workload escape the intended directory. Covers Kubernetes and container hosts where hostPath volumes and device mounts…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Auditing host mount and device exposure: a path into the node filesystem A hostPath volume or a device mount is a hole cut in the container boundary: it connects the workload directly to the node's filesystem or hardware. Sometimes that is genuinely needed, a node agent reading a specific system directory, but the exposure is defined by what the mount reaches, not by why it was added. A writable hostPath into a sensitive node directory lets the workload alter node state; a mount of the host root or a broad system path exposes other pods' data, node configuration, and credentials; a raw device or block volume grants low-level access that bypasses filesystem controls; and a hostPath with loose subpath or symlink handling can be walked out of its intended directory into the rest of the node. The audit treats each host mount as node reach and asks how far it goes. You audit this by inventorying every host-path and device mount and determining exactly what node state each exposes and whether it is writable. ## When to use - Workloads mount hostPath volumes or devices that connect the container to the node filesystem or hardware. …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/auditing-host-mount-and-device-exposure@sha256:1c7add0125c3ea96The line at the top of this page pins the label git:20260828.ce55026, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_l7n6ptz2cuy322jf)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 28, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (9393 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_l7n6ptz2cuy322jf GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/auditing-host-mount-and-device-exposure GET https://markdownregistry.com/api/v1/blob/1c7add0125c3ea9655ce8c4a869a1ece046455b4a8fc3c4651af55e8059ab867
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.