disaster-recovery

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation framework for disaster recovery planning, providing metrics (RTO/RPO), strategies, and implementation guidance.
  • [COMMAND_EXECUTION]: Contains example AWS CLI commands and a Bash failover script (dr-failover.sh). These are illustrative templates for the user to implement in their own environment. The script uses environment variables (e.g., ${DR_SLACK_WEBHOOK}) for sensitive data and placeholder account IDs (123456789012), adhering to security best practices for documentation.
  • [DATA_EXFILTRATION]: The notification mechanism in the failover script uses curl to send status updates to a Slack webhook. Since the webhook URL is managed via an environment variable and the data sent is limited to operational status, this is considered a standard operational feature rather than a security risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for mapping user-provided evidence to DR checklists. While this involves processing untrusted data, the skill is a documentation and framework tool with no autonomous execution capabilities that could be exploited by embedded instructions in that data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 06:42 PM