fairdb-backup-manager
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses powerful system tools including
tar,rsync, andaws s3. While necessary for the stated purpose of backup management, these tools allow for extensive file system modification and data transfer to external S3 storage. - [COMMAND_EXECUTION]: Error handling instructions advise the agent to request elevated access if permissions are insufficient, which could lead to privilege escalation attempts during runtime.
- [COMMAND_EXECUTION]: Guidelines in
scripts/README.mdencourage making scripts executable usingchmod +x, facilitating the use of locally generated or stored automation code. - [PROMPT_INJECTION]: The skill ingests external configuration and data files while possessing
WriteandBashcapabilities. The absence of explicit boundary markers or sanitization logic for these inputs presents an indirect prompt injection surface where instructions hidden in data could influence agent actions.
Audit Metadata