[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M73FD4143235XF78B603H3BY":3,"skill-same:01M73FD4143235XF78B603H3BY":47},{"skillNo":4,"name":5,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":18,"linkOnly":19,"markdownContent":20,"markdownBody":21,"frontMatter":22,"refName":23,"commitSha":24,"skillDirectory":25,"forksCount":26,"repositoryHtmlUrl":27,"repositoryHomepageUrl":28,"ownerHtmlUrl":29,"ownerBlogUrl":30,"ownerDescription":31,"updatedAt":32,"install":33,"resources":46},"01M73FD4143235XF78B603H3BY","readonly-bind-mount-patterns",null,"Horonomos-laps\u002FYana-AI","Horonomos-laps","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F355299122?v=4","01M76B3QPXE88ET2SQPDPVATZT"," Horonomos-laps","01M72ZQRJPCYPSSWT4D00VJR2A",13,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freadonly-bind-mount-patterns\u002FSKILL.md",[],[],"2026-11-11 15:11:14",false,"---\nname: readonly-bind-mount-patterns\ndescription: Read-only bind mount patterns for safe source code analysis. Mount workspace as ro inside containers, overlayfs for copy-on-write analysis, Docker ro bind mounts, detecting unauthorized writes before they reach source. Sources: docker\u002Fcli, OCI spec, overlayfs docs.\norigin: yana-ai — synthesized from docker\u002Fcli (Apache-2.0), Linux overlayfs documentation\nlicense: Apache-2.0\nversion: 1.0.0\ncompatibility: yana-ai >= 1.3.48\n---\n\n# \u002Freadonly-bind-mount-patterns\n\n## When to Use\n\n- Agent must read source code but must NOT be able to modify it directly\n- Staging writes through an overlay (CoW) before committing to real workspace\n- Docker volume mounts in agent containers: `--mount type=bind,readonly`\n- Gate L5: path-traversal prevention via filesystem-level enforcement\n\n## Do NOT use for\n\n- Environments where overlayfs is unavailable (some Docker-in-Docker setups)\n- Replacing content-based validation (read-only mount + content scan = belt + suspenders)\n\n---\n\n## Linux read-only bind mount\n\n```bash\nreadonly_bind() {\n  local src=\"$1\"\n  local dest=\"$2\"\n  mkdir -p \"$dest\"\n\n  # Bind mount then remount read-only (two-step — single --bind,ro is unreliable)\n  mount --bind        \"$src\"  \"$dest\"\n  mount --remount,ro  \"$dest\"\n\n  echo \"[ro-bind] $src → $dest (read-only)\"\n  trap \"umount -l '$dest'\" EXIT\n}\n\nreadonly_bind \u002Fworkspaces\u002Fyana-ai \u002Fsandbox\u002Fworkspace\n```\n\n---\n\n## Overlayfs CoW sandbox\n\n```bash\nsetup_cow_workspace() {\n  local real_ws=\"$1\"\n  local upper=\"\u002Ftmp\u002Foverlay-upper\"\n  local work=\"\u002Ftmp\u002Foverlay-work\"\n  local merged=\"\u002Ftmp\u002Fsandbox-merged\"\n\n  mkdir -p \"$upper\" \"$work\" \"$merged\"\n\n  mount -t overlay overlay \\\n    -o \"lowerdir=${real_ws},upperdir=${upper},workdir=${work}\" \\\n    \"$merged\"\n\n  echo \"[overlay] CoW workspace at $merged\"\n  echo \"[overlay] real writes captured in $upper\"\n\n  # After agent runs, diff what changed\n  find \"$upper\" -type f | while read -r f; do\n    rel=\"${f#$upper\u002F}\"\n    echo \"[overlay] WRITTEN: $rel\"\n  done\n}\n\ntrap 'umount \u002Ftmp\u002Fsandbox-merged 2>\u002Fdev\u002Fnull || true' EXIT\nsetup_cow_workspace \u002Fworkspaces\u002Fyana-ai\n```\n\n---\n\n## Docker read-only bind mount\n\n```bash\n# Run agent container with workspace as read-only bind\ndocker run --rm \\\n  --mount \"type=bind,source=\u002Fworkspaces,target=\u002Fworkspace,readonly\" \\\n  --mount \"type=tmpfs,target=\u002Ftmp,tmpfs-size=128m\" \\\n  --read-only \\\n  --security-opt no-new-privileges \\\n  --cap-drop ALL \\\n  yamtam-agent:latest \\\n  \u002Fbin\u002Fsh -c \"cd \u002Fworkspace && analyze-code.sh\"\n```\n\n---\n\n## Verify mount is truly read-only\n\n```bash\nverify_readonly() {\n  local mount_point=\"$1\"\n  if touch \"${mount_point}\u002F.ro-test-$$\" 2>\u002Fdev\u002Fnull; then\n    rm -f \"${mount_point}\u002F.ro-test-$$\"\n    echo \"[verify] FAIL: $mount_point is writable\" >&2\n    return 1\n  else\n    echo \"[verify] OK: $mount_point is read-only\"\n  fi\n}\n```\n\n---\n\n## Write audit: detect attempts to write through ro mount\n\n```bash\n# Intercept write attempts in audit log\nauditctl -w \u002Fworkspaces -p w -k workspace_write\n\n# Monitor\nausearch -k workspace_write -ts recent --format csv | \\\n  awk -F',' '{print $5, $6, $7}' | sort -u\n```\n\n---\n\n## OCI config.json bind mount (read-only)\n\n```json\n\"mounts\": [\n  {\n    \"destination\": \"\u002Fworkspace\",\n    \"type\":        \"bind\",\n    \"source\":      \"\u002Fworkspaces\u002Fyana-ai\",\n    \"options\":     [\"rbind\",\"ro\",\"nosuid\",\"nodev\"]\n  },\n  {\n    \"destination\": \"\u002Ftmp\",\n    \"type\":        \"tmpfs\",\n    \"source\":      \"tmpfs\",\n    \"options\":     [\"nosuid\",\"nodev\",\"size=128m\"]\n  }\n]\n```\n\n---\n\n## Anti-Fake-Pass Checklist\n\n```\n❌ Single --bind,ro flag without remount → mount actually writable on some kernels\n❌ Overlayfs upper dir inside ro-bound lower → writes fail with EROFS silently\n❌ workdir and upperdir on different filesystems → overlayfs EXDEV at mount time\n❌ No audit of upper dir after agent run → cannot confirm agent wrote nothing\n❌ \u002Ftmp not isolated → agent writes temp files that reference real workspace paths\n❌ rbind not used → submounts of \u002Fworkspaces (nested git repos) remain writable\n❌ nosuid not set on bind mount → SUID binaries in workspace can escalate\n```\n","# \u002Freadonly-bind-mount-patterns\n\n## When to Use\n\n- Agent must read source code but must NOT be able to modify it directly\n- Staging writes through an overlay (CoW) before committing to real workspace\n- Docker volume mounts in agent containers: `--mount type=bind,readonly`\n- Gate L5: path-traversal prevention via filesystem-level enforcement\n\n## Do NOT use for\n\n- Environments where overlayfs is unavailable (some Docker-in-Docker setups)\n- Replacing content-based validation (read-only mount + content scan = belt + suspenders)\n\n---\n\n## Linux read-only bind mount\n\n```bash\nreadonly_bind() {\n  local src=\"$1\"\n  local dest=\"$2\"\n  mkdir -p \"$dest\"\n\n  # Bind mount then remount read-only (two-step — single --bind,ro is unreliable)\n  mount --bind        \"$src\"  \"$dest\"\n  mount --remount,ro  \"$dest\"\n\n  echo \"[ro-bind] $src → $dest (read-only)\"\n  trap \"umount -l '$dest'\" EXIT\n}\n\nreadonly_bind \u002Fworkspaces\u002Fyana-ai \u002Fsandbox\u002Fworkspace\n```\n\n---\n\n## Overlayfs CoW sandbox\n\n```bash\nsetup_cow_workspace() {\n  local real_ws=\"$1\"\n  local upper=\"\u002Ftmp\u002Foverlay-upper\"\n  local work=\"\u002Ftmp\u002Foverlay-work\"\n  local merged=\"\u002Ftmp\u002Fsandbox-merged\"\n\n  mkdir -p \"$upper\" \"$work\" \"$merged\"\n\n  mount -t overlay overlay \\\n    -o \"lowerdir=${real_ws},upperdir=${upper},workdir=${work}\" \\\n    \"$merged\"\n\n  echo \"[overlay] CoW workspace at $merged\"\n  echo \"[overlay] real writes captured in $upper\"\n\n  # After agent runs, diff what changed\n  find \"$upper\" -type f | while read -r f; do\n    rel=\"${f#$upper\u002F}\"\n    echo \"[overlay] WRITTEN: $rel\"\n  done\n}\n\ntrap 'umount \u002Ftmp\u002Fsandbox-merged 2>\u002Fdev\u002Fnull || true' EXIT\nsetup_cow_workspace \u002Fworkspaces\u002Fyana-ai\n```\n\n---\n\n## Docker read-only bind mount\n\n```bash\n# Run agent container with workspace as read-only bind\ndocker run --rm \\\n  --mount \"type=bind,source=\u002Fworkspaces,target=\u002Fworkspace,readonly\" \\\n  --mount \"type=tmpfs,target=\u002Ftmp,tmpfs-size=128m\" \\\n  --read-only \\\n  --security-opt no-new-privileges \\\n  --cap-drop ALL \\\n  yamtam-agent:latest \\\n  \u002Fbin\u002Fsh -c \"cd \u002Fworkspace && analyze-code.sh\"\n```\n\n---\n\n## Verify mount is truly read-only\n\n```bash\nverify_readonly() {\n  local mount_point=\"$1\"\n  if touch \"${mount_point}\u002F.ro-test-$$\" 2>\u002Fdev\u002Fnull; then\n    rm -f \"${mount_point}\u002F.ro-test-$$\"\n    echo \"[verify] FAIL: $mount_point is writable\" >&2\n    return 1\n  else\n    echo \"[verify] OK: $mount_point is read-only\"\n  fi\n}\n```\n\n---\n\n## Write audit: detect attempts to write through ro mount\n\n```bash\n# Intercept write attempts in audit log\nauditctl -w \u002Fworkspaces -p w -k workspace_write\n\n# Monitor\nausearch -k workspace_write -ts recent --format csv | \\\n  awk -F',' '{print $5, $6, $7}' | sort -u\n```\n\n---\n\n## OCI config.json bind mount (read-only)\n\n```json\n\"mounts\": [\n  {\n    \"destination\": \"\u002Fworkspace\",\n    \"type\":        \"bind\",\n    \"source\":      \"\u002Fworkspaces\u002Fyana-ai\",\n    \"options\":     [\"rbind\",\"ro\",\"nosuid\",\"nodev\"]\n  },\n  {\n    \"destination\": \"\u002Ftmp\",\n    \"type\":        \"tmpfs\",\n    \"source\":      \"tmpfs\",\n    \"options\":     [\"nosuid\",\"nodev\",\"size=128m\"]\n  }\n]\n```\n\n---\n\n## Anti-Fake-Pass Checklist\n\n```\n❌ Single --bind,ro flag without remount → mount actually writable on some kernels\n❌ Overlayfs upper dir inside ro-bound lower → writes fail with EROFS silently\n❌ workdir and upperdir on different filesystems → overlayfs EXDEV at mount time\n❌ No audit of upper dir after agent run → cannot confirm agent wrote nothing\n❌ \u002Ftmp not isolated → agent writes temp files that reference real workspace paths\n❌ rbind not used → submounts of \u002Fworkspaces (nested git repos) remain writable\n❌ nosuid not set on bind mount → SUID binaries in workspace can escalate\n```\n",{},"main","481dcd7dd2e288b9d627a2bd017db70e64e6c6fa","core\u002Fskills\u002Freadonly-bind-mount-patterns",2,"https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI","https:\u002F\u002Fyana.vutam.link\u002F","https:\u002F\u002Fgithub.com\u002FHoronomos-laps","https:\u002F\u002Fyana.vutam.link","An open-source governed runtime & execution environment for multi-agent AI systems.","2026-11-14 13:24:09",{"source":7,"skillName":5,"commands":34,"prompt":44,"zipAvailable":45},[35,38,41],{"tool":36,"command":37},"npx","npx skills add Horonomos-laps\u002FYana-AI --skill readonly-bind-mount-patterns",{"tool":39,"command":40},"bunx","bunx skills add Horonomos-laps\u002FYana-AI --skill readonly-bind-mount-patterns",{"tool":42,"command":43},"pnpm","pnpm dlx skills add Horonomos-laps\u002FYana-AI --skill readonly-bind-mount-patterns","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Freadonly-bind-mount-patterns\u002FSKILL.md",true,[],[48,56,63,71,79,87],{"skillNo":49,"name":50,"nameZh":6,"description":51,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":52,"licenseFileUrl":6,"sourceHtmlUrl":53,"categories":54,"keywords":55,"publishedAt":18},"01M735GKET5YVYKAY62W2P5YXB","openai--sentry--sentry","Use when the user asks to inspect Sentry issues or events, summarize recent production errors, or pull basic Sentry health data via the Sentry API; perform read-only queries with the bundled script and require `SENTRY_AUTH_TOKEN`.","MIT","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fopenai--sentry--sentry\u002FSKILL.md",[],[],{"skillNo":57,"name":58,"nameZh":6,"description":59,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":60,"categories":61,"keywords":62,"publishedAt":18},"01M73DCAP83T17HY7SMGK7MGFE","ito-basket-compare","Compare Itô prediction-market baskets against a user's knowledge base, portfolio notes, financial context, watchlist, or research thesis. Use for read-only basket comparison and gap analysis without investment advice or live trading.","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fito-basket-compare\u002FSKILL.md",[],[],{"skillNo":64,"name":65,"nameZh":6,"description":66,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":67,"sourceHtmlUrl":68,"categories":69,"keywords":70,"publishedAt":18},"01M734CYEMZFDR3KH6SW0JP8TD","implementing-network-traffic-baselining","Build network traffic baselines from NetFlow\u002FIPFIX data using Python pandas for statistical analysis, z-score anomaly detection, and hourly\u002Fdaily traffic pattern profiling","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-network-traffic-baselining\u002FSKILL.md",[],[],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":75,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":18},"01M73ASZ6NJRJM44Z2P84NGQ3Q","detecting-evasion-techniques-in-endpoint-logs","Detects defense evasion techniques used by adversaries in endpoint logs including log tampering, timestomping, process injection, and security tool disabling. Use when investigating suspicious endpoint behavior, building detection rules for evasion tactics, or conducting threat hunting for stealthy adversary activity. Activates for requests involving evasion detection, defense evasion analysis, log tampering detection, or MITRE ATT&CK TA0005.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002Fcore\u002Fskills\u002Fdetecting-evasion-techniques-in-endpoint-logs\u002FSKILL.md",[],[],{"skillNo":80,"name":81,"nameZh":6,"description":82,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":83,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":18},"01M734AFNXD06Z78QRK0VKGT7Q","implementing-microsegmentation-with-guardicore","Implementing microsegmentation using Akamai Guardicore Segmentation to map application dependencies, create granular network policies, visualize east-west traffic flows, and enforce least-privilege communication between workloads across data centers and cloud.","https:\u002F\u002Fgithub.com\u002Fyanacuti1121\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Fimplementing-microsegmentation-with-guardicore\u002FSKILL.md",[],[],{"skillNo":88,"name":89,"nameZh":6,"description":6,"descriptionZh":6,"repositoryFullName":7,"ownerLogin":8,"ownerAvatarUrl":9,"ownerAccountNo":10,"ownerDisplayName":11,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":92,"publishedAt":18},"01M736TK27QMCXK0DVCH25SJN5","ramdisk-tmpfs-patterns","https:\u002F\u002Fgithub.com\u002FHoronomos-laps\u002FYana-AI\u002Fblob\u002Fmain\u002F.claude\u002Fskills\u002Framdisk-tmpfs-patterns\u002FSKILL.md",[],[]]