tigris-snapshots-recovery
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the Tigris CLI (@tigrisdata/cli) using NPM. This is an official tool managed by the skill author, Tigris Data.
- [COMMAND_EXECUTION]: The skill utilizes the Tigris CLI to perform administrative and data restoration tasks, such as creating snapshot-enabled buckets and copying data between them.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection due to its core function of reading and restoring data from external storage. Ingestion points: The skill reads object content from Tigris buckets through various SDK methods (get, list, getObjectAtVersion) as documented in SKILL.md and the resources folder. Boundary markers: No explicit prompt boundaries or safety instructions for handling object content are defined. Capability inventory: The skill has the ability to execute shell commands via the Tigris CLI and perform write operations to cloud storage. Sanitization: The skill performs no sanitization, as its purpose is to restore data exactly as it was stored.
Audit Metadata