disaster-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation framework for disaster recovery planning, providing metrics (RTO/RPO), strategies, and implementation guidance.
- [COMMAND_EXECUTION]: Contains example AWS CLI commands and a Bash failover script (
dr-failover.sh). These are illustrative templates for the user to implement in their own environment. The script uses environment variables (e.g.,${DR_SLACK_WEBHOOK}) for sensitive data and placeholder account IDs (123456789012), adhering to security best practices for documentation. - [DATA_EXFILTRATION]: The notification mechanism in the failover script uses
curlto send status updates to a Slack webhook. Since the webhook URL is managed via an environment variable and the data sent is limited to operational status, this is considered a standard operational feature rather than a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for mapping user-provided evidence to DR checklists. While this involves processing untrusted data, the skill is a documentation and framework tool with no autonomous execution capabilities that could be exploited by embedded instructions in that data.
Audit Metadata