database-backups
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts designed to execute standard database utilities (such as pg_dump, mysqldump, and mongodump) and cloud CLI tools (aws and restic). These are legitimate and necessary for the intended purpose of database administration.
- [PRIVILEGE_ESCALATION]: Administrative commands using sudo are provided for service management, such as stopping/starting MySQL, and correcting file ownership during restoration processes. These are expected actions for database maintenance tasks.
- [CREDENTIALS_UNSAFE]: The documentation and scripts correctly use variable placeholders and established documentation prefixes (e.g., AKIA..., RESTIC_PASSWORD) rather than hardcoding actual sensitive credentials or secrets.
- [SAFE]: Security hardening is demonstrated through the use of umask 077 in scripts to ensure that backup files are created with restricted read/write permissions, limiting access to the backup user.
Audit Metadata