disaster-recovery

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute various system and database administration commands, including mysql, pg_restore, tar, rsync, grub-install, and systemctl. These tools are necessary for the stated purpose of disaster recovery.
  • [PRIVILEGE_ESCALATION]: The skill includes instructions for system-level recovery tasks that require elevated privileges, such as using chroot during boot repair and modifying system configurations in /etc/. These operations are standard practices for system administrators performing disaster recovery.
  • [INDIRECT_PROMPT_INJECTION]: The recovery and drill scripts in the documentation ingest data from external endpoints via curl when checking service health (e.g., http://localhost/health). This represents an attack surface for tool output poisoning.
  • Ingestion points: SKILL.md (Scenario 1 and Scenario 2 shell scripts)
  • Boundary markers: Absent
  • Capability inventory: mysql, systemctl, grub-install, mount, chroot, restorecon across the recovery instructions
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 06:08 PM