database-backup-restore
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded password found in
references/binary-log-backups.mdwhereMYSQL_PWDis set to a literal string value. - [DATA_EXFILTRATION]: The script in
references/incremental-differential-backups.mdperforms a network operation to upload database backups to an external S3 bucket (s3://backup-bucket/postgres/). - [COMMAND_EXECUTION]: The skill provides numerous shell commands for database backup and restoration, including
pg_dump,mysql,pg_basebackup, and custom shell scripts that execute with user-provided parameters. - [INDIRECT_PROMPT_INJECTION]: The skill processes database backups and binary logs, which are external data sources that could contain malicious instructions designed to influence the agent's behavior during restoration or validation tasks.
Recommendations
- AI detected serious security threats
Audit Metadata