disaster-recovery
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to execute standard Linux commands for system maintenance and recovery, including
aptfor package management,rsyncfor file synchronization,systemctlfor service control, andddfor disk imaging. These commands are appropriate for the skill's primary function of disaster recovery. - [PRIVILEGE_ESCALATION]: Several recovery steps require administrative privileges via
sudo. While this involves high-level system access, it is necessary for restoring system-level directories (e.g.,/etc/,/opt/) and managing system services. The usage is well-scoped to the task of full system restoration. - [INDIRECT_PROMPT_INJECTION]: The skill consumes data from external backup snapshots and lists. There is an inherent, though low-risk, attack surface where malicious content within a backup repository could attempt to influence the agent's behavior during the restoration process.
- Ingestion points: Data enters the context via
homelab_backupList,homelab_backupStatus, andhomelab_backupDiffinSKILL.md. - Boundary markers: None identified in the workflow steps.
- Capability inventory: The skill facilitates file writes via
rsync, disk imaging viadd, and service management viasystemctl(documented inSKILL.md). - Sanitization: No explicit sanitization or validation of the backup content is mentioned before restoration.
Audit Metadata