backup
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use a specialized CLI tool called
mac-backupfor all file operations. The instructions explicitly prohibit the use of raw shell commands likersync,scp, orsshfs, directing the agent to use the vendor-provided implementation for mirroring, archiving, and restoring files. - [INDIRECT_PROMPT_INJECTION]: The skill processes external job configuration files which could potentially contain malicious instructions.
- Ingestion points: The skill reads job definitions from JSON files via the
mac-backup plan <job>command. - Boundary markers: None explicitly defined, though the skill requires the agent to verify the plan's metadata (byte counts, volume IDs) against the user's original request.
- Capability inventory: The skill has the capability to mirror, restore, and delete files (archive) through the CLI tool.
- Sanitization: The instructions require a mandatory
planstep to review execution details before proceeding with transfers.
Audit Metadata