backup-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Restic backup tool binary from its official release repository on GitHub.
- [COMMAND_EXECUTION]: Provides commands for system package installation and managing file permissions.
- [CREDENTIALS_UNSAFE]: Includes templates for cloud storage credentials and instructions for creating local password files for automated repository access.
- [PRIVILEGE_ESCALATION]: Details the creation of system-level services and timers that operate with root permissions.
- [PERSISTENCE]: Configures systemd timers to automate recurring backup tasks.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates large-scale data ingestion from the local filesystem to external storage; this data flow lacks specific boundary markers or sanitization, presenting a potential surface for indirect prompt injection if source data is attacker-controlled.
Audit Metadata