skills/galyarderlabs/galyarder-framework/validating-backup-integrity-for-recovery/Gen Agent Trust Hub
validating-backup-integrity-for-recovery
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to validate backup integrity, which involves the agent ingesting and processing external, potentially untrusted data from backups. This creates a surface for indirect prompt injection where malicious instructions embedded in the data could influence agent behavior.
- Ingestion points: The skill explicitly processes backups and recovery data to verify they are restorable and complete.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands within the processed data are defined in this skill.
- Capability inventory: The skill utilizes an
ExecutionProxy Interfacefor terminal actions and references theMemoryStore Interfacefor writing artifacts. - Sanitization: There are no explicit sanitization or filtering steps defined for the content extracted from backups.
- [COMMAND_EXECUTION]: The framework instructions mandate the use of an
ExecutionProxy Interface(specifically thertkprefix, such asrtk npm test) for performing terminal actions. This establishes a pattern for the agent to execute shell commands during the verification and testing process.
Audit Metadata