validating-backup-integrity-for-recovery

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to validate backup integrity, which involves the agent ingesting and processing external, potentially untrusted data from backups. This creates a surface for indirect prompt injection where malicious instructions embedded in the data could influence agent behavior.
  • Ingestion points: The skill explicitly processes backups and recovery data to verify they are restorable and complete.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the processed data are defined in this skill.
  • Capability inventory: The skill utilizes an ExecutionProxy Interface for terminal actions and references the MemoryStore Interface for writing artifacts.
  • Sanitization: There are no explicit sanitization or filtering steps defined for the content extracted from backups.
  • [COMMAND_EXECUTION]: The framework instructions mandate the use of an ExecutionProxy Interface (specifically the rtk prefix, such as rtk npm test) for performing terminal actions. This establishes a pattern for the agent to execute shell commands during the verification and testing process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 07:36 AM
Security Audit — agent-trust-hub — validating-backup-integrity-for-recovery