cli-backup-sync
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides several ingestion points for untrusted data that could potentially influence agent behavior or be used for malicious purposes. \n- Ingestion points: The
cloud createcommand accepts natural language via--promptand--prompt-fileflags, and external code/data via the--repoflag. Thecloud messagecommand also accepts arbitrary text input from the user or external sources.\n- Boundary markers: There are no explicit delimiters or instructions provided to separate these inputs from the agent's core instructions.\n- Capability inventory: The skill utilizes theomnirouteCLI to perform network operations (syncing to cloud providers) and sensitive file system operations (creating, managing, and restoring backups).\n- Sanitization: No sanitization, validation, or escaping of the ingested content is described in the provided skill instructions.\n- [COMMAND_EXECUTION]: The instructions direct the user to perform a global installation of an NPM package (omniroute) and execute various subcommands that interact with the system's files and network.
Audit Metadata