skills/vaquarkhan/data-engineering-agent-skills/safe-backfill-and-replay-orchestration/Gen Agent Trust Hub
safe-backfill-and-replay-orchestration
Warn
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of shell scripts 'hooks/backfill-guard.sh' and 'hooks/backfill-guard.ps1'. Since these scripts are not provided in the skill contents, their security impact and the commands they perform cannot be verified.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it ingests and processes data from external configuration and evidence templates.
- Ingestion points: Data is read from 'templates/backfill-plan.yaml' and 'templates/release-gate-evidence.yaml' as part of the orchestration workflow.
- Boundary markers: Absent; the instructions do not include delimiters or specific warnings to ignore instructions that might be embedded within these external files.
- Capability inventory: The skill has access to shell command execution (via hooks) and file-based state management.
- Sanitization: Absent; no validation, escaping, or schema enforcement is mentioned for the content of the YAML templates before processing.
Audit Metadata