Security audit

Duplicati Backup Manager

Security checks across malware telemetry and agentic risk

Overview

This skill appears to do what it says: let an agent check and start Duplicati backup jobs on a user-configured server.

Install only if you are comfortable giving the agent authenticated access to your Duplicati server. Treat the token like an admin secret, avoid committing it to repositories or logs, restrict Duplicati to trusted networks, and confirm the intended backup job before asking the agent to start it.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The README explicitly instructs users to create and store a 10-year bearer token for a backup server and presents it as a security feature without warning that it is a high-value credential. If exposed through config files, logs, shell history, backups, or repo commits, an attacker could use the token to access and control Duplicati backup operations for a very long period.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The skill can initiate server-side backup jobs, but the description and usage guidance do not clearly warn users that it performs state-changing actions on production backup infrastructure. This increases the chance of accidental invocation or misuse by users who may assume it is read-only monitoring, potentially causing unwanted load, overlapping jobs, or disruption of backup operations.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.