@2048/backup

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill orchestrates backup tasks using several Python scripts (pack.py, upload.py, download.py, restore.py, list.py, delete.py). These scripts are used to bundle files, manage network transfers, and apply configuration changes to the agent container.
  • [DATA_EXFILTRATION]: The tool is specifically designed to transmit agent state, including workspace files and sensitive environment variables (.env), to an internal backup service at sc-agent-backup.internal. This process is authenticated via the CONTAINER_JWT to ensure data remains within the user's specific tenant namespace.
  • [EXTERNAL_DOWNLOADS]: The download.py script retrieves backup archives from the internal service. It includes robust security measures such as whole-bundle and per-file SHA256 integrity checks, and audits tar member paths to reject absolute paths or parent directory references (..), effectively mitigating potential injection or traversal risks during restoration.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 03:04 PM