termux-backup
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves executing shell commands to manage backups. The script
scripts/estimate-backup-size.shrunsdu,df,awk, andunameto calculate directory sizes and check disk space.SKILL.mdinstructs the agent to usetarfor archiving anddpkgfor recording package lists.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect injection via file paths.\n - Ingestion points: The
scripts/estimate-backup-size.shscript takes a target directory as its first argument.\n - Boundary markers: Not present in the shell script code.\n
- Capability inventory: Includes file system size checks (
du,df), write permissions checks, and archive creation (tar).\n - Sanitization: The shell script uses double quotes around the input variable
"$target"to prevent word splitting and globbing.
Audit Metadata