gpc-app-recovery
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access were detected. The skill provides a legitimate interface for managing app-related recovery tasks.
- [COMMAND_EXECUTION]: The skill executes the
gpccommand-line utility. These executions are limited to specific subcommands likerecoveryandvitals, aligning with the utility's intended administrative use case. - [PROMPT_INJECTION]: The skill processes external JSON files, which serves as a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Files
recovery.jsonandtargeting.jsonare passed as arguments to thegpc recovery createandgpc recovery add-targetingcommands. - Boundary markers: None identified; the tool relies on file path inputs.
- Capability inventory: Executes
gpcfor listing, creating, deploying, and cancelling recovery actions, as well as checking crash vitals. - Sanitization: Not applicable as the agent handles file paths rather than interpreting file contents directly within its own prompt logic.
Audit Metadata