mariadb-impl-backup-restore
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill contains various shell commands and scripts intended for database administration. These include service management (systemctl), file system operations (cp, mv, chown), and the use of database utilities (mariadb-dump, mariadb-backup). All commands are standard for the described DBA tasks and do not show signs of malicious intent.
- [EXTERNAL_DOWNLOADS]: The skill mentions and utilizes standard external utilities such as
rsync,gpg, andaws-clifor off-site backup storage and encryption. The use of these tools is consistent with professional disaster recovery standards and targets generic placeholders (e.g., backup-host, s3://company-backups) intended for user configuration. - [CREDENTIALS_SAFE]: The skill correctly uses placeholders like
<secret>,<repl-secret>, and/etc/mariadb/backup-passphrasefor all sensitive information. It explicitly warns against exposing passwords in command-line arguments and recommends using defaults-files or environment-controlled secret management. - [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for processing database content and transaction logs. While this involves reading external data, the operations are performed using official MariaDB tools that treat the data as structured content rather than instructions for the agent. The purpose is strictly administrative and legitimate.
Audit Metadata