disaster-recovery
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various system and database administration commands, including
mysql,pg_restore,tar,rsync,grub-install, andsystemctl. These tools are necessary for the stated purpose of disaster recovery. - [PRIVILEGE_ESCALATION]: The skill includes instructions for system-level recovery tasks that require elevated privileges, such as using
chrootduring boot repair and modifying system configurations in/etc/. These operations are standard practices for system administrators performing disaster recovery. - [INDIRECT_PROMPT_INJECTION]: The recovery and drill scripts in the documentation ingest data from external endpoints via
curlwhen checking service health (e.g.,http://localhost/health). This represents an attack surface for tool output poisoning. - Ingestion points:
SKILL.md(Scenario 1 and Scenario 2 shell scripts) - Boundary markers: Absent
- Capability inventory:
mysql,systemctl,grub-install,mount,chroot,restoreconacross the recovery instructions - Sanitization: Absent
Audit Metadata