backup-restore-readiness-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, command injections, or exfiltration vectors were identified in the analyzed files. The code follows standard practices for a local CLI utility.
- [INDIRECT_PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection as it processes data from external files.
- Ingestion points: The
run.pyscript reads content from a file path provided via the--inputargument usinginput_path.read_text(). - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are used when reading the input file.
- Capability inventory: The script performs local file reads and writes (
pathlib.Path.read_textandpathlib.Path.write_text). - Sanitization: The input is parsed as JSON but the content is not sanitized or validated against a strict schema beyond basic structural parsing.
Audit Metadata