skills/ellmos-ai/skills/backup/Gen Agent Trust Hub

backup

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use a specialized CLI tool called mac-backup for all file operations. The instructions explicitly prohibit the use of raw shell commands like rsync, scp, or sshfs, directing the agent to use the vendor-provided implementation for mirroring, archiving, and restoring files.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external job configuration files which could potentially contain malicious instructions.
  • Ingestion points: The skill reads job definitions from JSON files via the mac-backup plan <job> command.
  • Boundary markers: None explicitly defined, though the skill requires the agent to verify the plan's metadata (byte counts, volume IDs) against the user's original request.
  • Capability inventory: The skill has the capability to mirror, restore, and delete files (archive) through the CLI tool.
  • Sanitization: The instructions require a mandatory plan step to review execution details before proceeding with transfers.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 05:40 AM