infra-backup-dr
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a set of instructional guidelines for infrastructure auditing. It promotes several security best practices, including using non-root processes in containers, encrypting backups, ensuring secrets are not stored in code repositories or container images, and using minimal ACLs for secret management tools like HashiCorp Vault.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external technical data such as job specifications, logs, and deployment manifests. While this represents an ingestion surface for potentially untrusted data that could contain malicious instructions, the skill does not possess any dangerous capabilities—such as file writing, network exfiltration, or arbitrary command execution—required to exploit such an injection. The risk is considered negligible given the skill's purely analytical nature.
Audit Metadata