@2048/backup
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates backup tasks using several Python scripts (
pack.py,upload.py,download.py,restore.py,list.py,delete.py). These scripts are used to bundle files, manage network transfers, and apply configuration changes to the agent container. - [DATA_EXFILTRATION]: The tool is specifically designed to transmit agent state, including workspace files and sensitive environment variables (.env), to an internal backup service at
sc-agent-backup.internal. This process is authenticated via theCONTAINER_JWTto ensure data remains within the user's specific tenant namespace. - [EXTERNAL_DOWNLOADS]: The
download.pyscript retrieves backup archives from the internal service. It includes robust security measures such as whole-bundle and per-file SHA256 integrity checks, and audits tar member paths to reject absolute paths or parent directory references (..), effectively mitigating potential injection or traversal risks during restoration.
Audit Metadata