backup-disaster-recovery

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill contains shell scripts (backup-restore.sh, validate-schema.sh) and Kubernetes CronJob configurations that execute standard database and cloud utility commands (pg_dump, psql, aws s3, kubectl, tar, gzip). These are used for their intended purpose of data backup, restoration, and infrastructure management.
  • [CREDENTIALS_SAFE]: The skill correctly demonstrates the use of Kubernetes secretKeyRef to inject sensitive environment variables like POSTGRES_PASSWORD, AWS_ACCESS_KEY_ID, and AWS_SECRET_ACCESS_KEY into containers, avoiding hardcoded secrets.
  • [DATA_EXPOSURE]: The scripts interact with S3 buckets (s3://my-backups) for storing backups. This is a standard architectural pattern for disaster recovery and does not constitute unauthorized exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — backup-disaster-recovery