termux-backup

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill involves executing shell commands to manage backups. The script scripts/estimate-backup-size.sh runs du, df, awk, and uname to calculate directory sizes and check disk space. SKILL.md instructs the agent to use tar for archiving and dpkg for recording package lists.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection via file paths.\n
  • Ingestion points: The scripts/estimate-backup-size.sh script takes a target directory as its first argument.\n
  • Boundary markers: Not present in the shell script code.\n
  • Capability inventory: Includes file system size checks (du, df), write permissions checks, and archive creation (tar).\n
  • Sanitization: The shell script uses double quotes around the input variable "$target" to prevent word splitting and globbing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 09:05 AM
Security Audit — agent-trust-hub — termux-backup