prestashop-restore
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the PrestaShop console (bin/console) to list and restore backups. This involves executing local scripts based on user-provided paths and backup identifiers.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external command output (backup:list) to determine the next action (backup:restore). While this allows for automated workflows, it creates a potential surface where malformed backup metadata could attempt to influence the agent's command parameters.
- Ingestion points: Output of backup:list command in SKILL.md.
- Boundary markers: None explicitly defined in instructions.
- Capability inventory: Local command execution via [module_path]/bin/console.
- Sanitization: None described within the skill instructions.
Audit Metadata