disaster-recovery

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user to execute standard Linux commands for system maintenance and recovery, including apt for package management, rsync for file synchronization, systemctl for service control, and dd for disk imaging. These commands are appropriate for the skill's primary function of disaster recovery.
  • [PRIVILEGE_ESCALATION]: Several recovery steps require administrative privileges via sudo. While this involves high-level system access, it is necessary for restoring system-level directories (e.g., /etc/, /opt/) and managing system services. The usage is well-scoped to the task of full system restoration.
  • [INDIRECT_PROMPT_INJECTION]: The skill consumes data from external backup snapshots and lists. There is an inherent, though low-risk, attack surface where malicious content within a backup repository could attempt to influence the agent's behavior during the restoration process.
  • Ingestion points: Data enters the context via homelab_backupList, homelab_backupStatus, and homelab_backupDiff in SKILL.md.
  • Boundary markers: None identified in the workflow steps.
  • Capability inventory: The skill facilitates file writes via rsync, disk imaging via dd, and service management via systemctl (documented in SKILL.md).
  • Sanitization: No explicit sanitization or validation of the backup content is mentioned before restoration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:03 AM