nenadzaric/skills-intel-mitmproxy-export repository overview

⁠mitmproxy-export

Export a saved mitmproxy HTTP flow capture to native HAR1.2 without listening or replay.

Native mitmproxy12.2.3, fixed mitmdump -n -r input.flow --set hardump=result.har in isolated config/cwd. Input --input FILE, positional output path (no -o). Empty HTTP flow, malformed/truncated input, missing input and occupied output rejected. Input50MiB, subprocess90s and adapter resource/output limits. Captured headers/bodies may contain sensitive material. No proxy listener, replay, adjacent addon/config execution or agent/device access. Saved actual HAR fixture has one HTTP GET example.invalid request and response201.

⁠Immutable image

docker pull --platform linux/amd64 docker.io/nenadzaric/skills-intel-mitmproxy-export@sha256:cd50fb23681d302ede29c310f0b46943d721d2e012993560b5a6f6eeea06630c

Tested image index: sha256:8788ae3faeac141f95c85e13bb0fe5c5cf8b31c75c27e98fc72044858fdef4a6. All runtime config/layers unchanged from the existing private image and saved successful fixture/tool/verifier workflow.

⁠Actual adapter source and original notices

The immutable source artifact includes mitmproxy-export/build-source/ with actual adapter/Dockerfile/fixtures/tests and catalog snapshot, original installed docs/common-license texts, exact Debian corresponding source/patches/descriptors and saved native/verifier output bytes. Source payloads for all44 installed Python distributions,390 checksum-bound embedded Rust crates, exactCPython3.12.14 and embeddedOpenSSL4.0.1 source checksums, applicable exact Debian sources and patches included. Primary release wheel file parity checked for all44 installed distributions; pyperclip source-build WHEEL metadata differs, program bytes match. No fresh tests/builds required or claimed.

oras pull docker.io/nenadzaric/skills-intel-mitmproxy-export@sha256:5178a847ba4ea70b7e0feeec080fe65c146b3a81b5cf6db9596a964699875c56
sha256sum mitmproxy-export-source-notices.tar.gz

Expected bundle SHA256: 26d8995941a39e8a7bd2eb698b47cdb001a36b9e4d9f422707066368fb4a1b01. Read mitmproxy-export/SOURCE-DELIVERY.txt, mitmproxy-export/notices/SOURCE-AND-NOTICES.json and mitmproxy-export/notices/COMPONENT-SOURCE-INDEX.json. Bundled build-source is the frozen pre-public-reference snapshot; later README/YAML/catalog metadata changes do not change runtime bytes.

⁠Verification and limits

Existing private workflow 573f98d7-4a43-4263-ac76-040802b3bb2c run c0598ec5-4afd-4506-93ee-c584820f961e passed fixture/tool/verifier with max1machine. Exact native and verifier bytes were re-downloaded/rehashed without a new run. Runtime adapter bytes extracted from stopped containers match source; no image rebuild, registration, provider call or new execution is claimed. Existing resource caps are adapter limits, not comprehensive peak containment or a security sandbox guarantee.

⁠License scope

MIT native mitmproxy and original per-component/runtime terms are retained. Existing workflows first-party Proprietary adapter policy is separate; no new grant/relicense. Original installed notices and corresponding-source delivery accompany the immutable image. Archive payload SHA256 checks against primary HTTPS descriptors/installed SBOMs are verified; original Debian signatures are preserved but not independently validated against maintainer keys. No exhaustive binary-composition/SBOM or bit-reproducible build claim. Public image/source distribution is distinct from public Trickest tool/page acceptance.